Maven package
com.google.cloud.tools/jib-core
pkg:maven/com.google.cloud.tools/jib-core
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-25914 | Med | 5.6 | < 0.22.0 | 0.22.0 | Sep 8, 2022 | The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input. |
- affected < 0.22.0fixed 0.22.0
The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.