Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-2v76-gf5v-m5p7	CVE-2026-3505	Unknown	eco-java-gradle-8.14.3	Pending upstream fix
CGA-85jx-rpmx-q4vg	CVE-2026-22865	Unknown	eco-java-gradle-8.14.3	Pending upstream fix
CGA-29rm-36qm-4g9w	CVE-2026-22816	Unknown	eco-java-gradle-8.14.3	Pending upstream fix
CGA-cwp3-h5hp-62x2	CVE-2022-41854	Medium	eco-java-gradle-6.1.1	Pending upstream fix
CGA-h7cx-qm5p-9244	CVE-2017-18640	High	eco-java-gradle-6.1.1	Pending upstream fix
CGA-3623-47p6-2x7p	CVE-2022-1471	High	eco-java-gradle-6.1.1	Pending upstream fix
CGA-7fm2-73f6-q5qf	CVE-2022-38750	Medium	eco-java-gradle-6.1.1	Pending upstream fix
CGA-8m52-67jm-7fpv	CVE-2022-38749	Medium	eco-java-gradle-6.1.1	Pending upstream fix
CGA-q2mx-p9p9-x862	CVE-2022-38752	Medium	eco-java-gradle-6.1.1	Pending upstream fix
CGA-mfpf-cr94-x98r	CVE-2022-38751	Medium	eco-java-gradle-6.1.1	Pending upstream fix
CGA-g222-3x75-98mq	CVE-2022-25857	High	eco-java-gradle-6.1.1	Pending upstream fix
CGA-5p2x-mjpf-f56h	CVE-2025-67030	High	eco-java-gradle-6.1.1	Pending upstream fix
CGA-cxj4-m9g3-c832	CVE-2025-4949	Unknown	eco-java-gradle-6.1.1	Pending upstream fix
CGA-qm7j-wvqh-57wr	CVE-2023-4759	High	eco-java-gradle-6.1.1	Pending upstream fix
CGA-wfpr-r4g4-2c8f	CVE-2021-26291	Critical	eco-java-gradle-6.1.1	Pending upstream fix
CGA-669v-hm64-w8h5	CVE-2021-26291	Critical	eco-java-gradle-6.1.1	Pending upstream fix

1,128,794 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company