Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CGA-g87h-2gvp-mrfq
published 1 month ago
Summary
No summary available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | eco-java-gradle-5.2.1 | All versions |
Original advisory text
CGA-g87h-2gvp-mrfq
References
- https://www.oracle.com/security-alerts/cpuapr2020.html URL
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab... URL
- https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b... URL
- https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804... URL
- https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd9... URL
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12e... URL
- https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c8... URL
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e... URL
- https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551... URL
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d28... URL
- https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741... URL
- https://www.debian.org/security/2019/dsa-4452 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:1782 Vendor Advisory
- https://access.redhat.com/errata/RHBA-2019:0959 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:4037 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:0877 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:1822 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:1823 Vendor Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Vendor Advisory
- http://www.securityfocus.com/bid/107985 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:1797 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:2804 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3892 Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3149 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:0782 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:2858 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3002 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3140 Vendor Advisory
- https://seclists.org/bugtraq/2019/May/68 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20190530-0003/ Vendor Advisory
- https://issues.apache.org/jira/browse/TINKERPOP-2121 Third Party Advisory
- https://github.com/FasterXML/jackson-databind/issues/2186 Patch
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch
- https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8 Patch
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch
- https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d... Patch
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published7 Sep 2026
Updated5 Nov 2026
First seen5 Nov 2026
Sources
CGA-g87h-2gvp-mrfq · OSV
Track software like this
Free during beta