{"action":"Upgrade com.google.cloud.tools:jib-core to 0.22.0 or later.","affected":[{"fixed":"0.22.0","introduced":"0"}],"component":"com.google.cloud.tools:jib-core","cve_ids":["CVE-2022-25914"],"ecosystem":"Maven","epss":0.01752,"exploited":false,"fixed_versions":["0.22.0"],"ghsa_id":"GHSA-936v-cg49-m2g5","id":"tcs_01M5N8NY4CXS2R4XPVGW5A459K","modified_at":"2024-12-06T05:30:23.850461Z","published_at":"2022-09-09T00:00:57Z","references":["https://osv.dev/vulnerability/GHSA-936v-cg49-m2g5","https://nvd.nist.gov/vuln/detail/CVE-2022-25914","https://github.com/GoogleContainerTools/jib/pull/3744","https://github.com/GoogleContainerTools/jib/commit/67fa40bc2c484da0546333914ea07a89fe44eaaf","https://github.com/GoogleContainerTools/jib","https://security.snyk.io/vuln/SNYK-JAVA-COMGOOGLECLOUDTOOLS-2968871"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-936v-cg49-m2g5","url":"https://osv.dev/vulnerability/GHSA-936v-cg49-m2g5"}],"summary":"com.google.cloud.tools:jib-core vulnerable to Remote Code Execution (RCE)"}