Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

1 record

Priority MEDIUM 46

The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01752 Published 2022-09-08 Partial fix · 0.22.0