Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CGA-gv4h-grcr-x3mg
published 1 month ago
Summary
No summary available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | eco-java-gradle-5.1.1 | All versions |
Original advisory text
CGA-gv4h-grcr-x3mg
References
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12e... URL
- https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741... URL
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d28... URL
- https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd9... URL
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e... URL
- https://access.redhat.com/errata/RHSA-2019:2804 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:2858 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3149 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3892 Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:0782 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:1782 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20190530-0003/ Vendor Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Vendor Advisory
- https://access.redhat.com/errata/RHBA-2019:0959 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:1797 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:1822 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3002 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3140 Vendor Advisory
- https://www.debian.org/security/2019/dsa-4452 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:4037 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:0877 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2019:1823 Vendor Advisory
- https://seclists.org/bugtraq/2019/May/68 Third Party Advisory
- https://github.com/FasterXML/jackson-databind/issues/2097 Patch
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Patch
- https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4... Patch
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch
- https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7 Patch
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published7 Sep 2026
Updated5 Nov 2026
First seen5 Nov 2026
Sources
CGA-gv4h-grcr-x3mg · OSV
Track software like this
Free during beta