Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-mf5f-77jf-f85h	CVE-2026-18401	Unknown	eco-java-gradle-8.14.4	Pending upstream fix
CGA-c3m8-v9vw-qrg8	CVE-2020-36843	Medium	eco-java-gradle-8.14.4	Pending upstream fix
CGA-72g4-grwg-2256	CVE-2025-48924	Medium	eco-java-gradle-8.14.4	Pending upstream fix
CGA-7fch-rhh5-pr73	CVE-2025-48924	Medium	eco-java-gradle-8.14.4	Pending upstream fix
CGA-jhqj-ww3r-539v	CVE-2026-0636	Unknown	eco-java-gradle-8.14.4	Pending upstream fix
CGA-hc6r-9g75-7pv6	CVE-2025-14813	Unknown	eco-java-gradle-8.14.4	Pending upstream fix
CGA-v45x-m74j-5xm4	CVE-2026-3505	Unknown	eco-java-gradle-8.14.4	Pending upstream fix
CGA-r953-x592-79mh	CVE-2026-22865	Unknown	eco-java-gradle-8.14.4	Pending upstream fix
CGA-mc3x-7qr5-2xq4	CVE-2026-22816	Unknown	eco-java-gradle-8.14.4	Pending upstream fix
CGA-3q9g-fx83-c6mh	CGA-3q9g-fx83-c6mh	Unknown	percona-valkey-exporter	Not affected
CGA-8r4f-c53p-3mpv	CVE-2026-22865	Unknown	eco-java-gradle-2.10-default	Pending upstream fix
CGA-g9xq-cch6-fc98	CVE-2026-22816	Unknown	eco-java-gradle-2.10-default	Pending upstream fix
CGA-8657-8p6m-8cjr	CVE-2023-44387	Low	eco-java-gradle-2.10-default	Pending upstream fix
CGA-c99g-hv35-3qf8	CVE-2023-42445	Medium	eco-java-gradle-2.10-default	Pending upstream fix
CGA-6w2q-fpmv-hgc9	CVE-2023-35947	Medium	eco-java-gradle-2.10-default	Pending upstream fix
CGA-5vq4-xm98-rrp3	CVE-2023-35946	Medium	eco-java-gradle-2.10-default	Pending upstream fix

1,125,215 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company