Security Advisories

View the status of known vulnerabilities in a Chainguard Container along with daily updates on security patches. Learn more

Advisory timestamps represent when updates are made to the advisory page, not when they were first detected and triaged by Chainguard. For more on our Security Advisories process see how Chainguard issues advisories.

CGA ID	CVE ID	Severity	Affected package	Status
CGA-j2cx-w43p-q4jc	CVE-2020-36179	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-pqqq-8gfg-gvf3	CVE-2020-10672	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-g3x8-685x-9ph8	CVE-2020-36185	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-g555-h624-xwfx	CVE-2020-36180	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-hgxw-gvfg-hr7j	CVE-2020-36182	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-6hwf-rgrh-36q9	CVE-2019-16335	Critical	eco-java-gradle-5.4.1	Pending upstream fix
CGA-9rwq-vjm7-p3m6	CVE-2020-10969	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-mvm7-6j6r-cgfw	CVE-2019-14379	Critical	eco-java-gradle-5.4.1	Pending upstream fix
CGA-2qj2-x4r9-wqxc	CVE-2019-12086	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-vwx2-fp2h-x3p9	CVE-2020-35728	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-hf3p-7wvp-p8rp	CVE-2020-9546	Critical	eco-java-gradle-5.4.1	Pending upstream fix
CGA-7wwm-5cm9-2jr7	CVE-2026-54515	Medium	eco-java-gradle-5.4.1	Pending upstream fix
CGA-fhfh-x43f-8645	CVE-2021-20190	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-3f23-fvw2-vwv4	CVE-2020-11112	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-v6j9-97hp-f963	CVE-2020-36518	High	eco-java-gradle-5.4.1	Pending upstream fix
CGA-qp73-2qm3-j9pg	CVE-2020-8840	Critical	eco-java-gradle-5.4.1	Pending upstream fix

1,129,097 advisories

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

Security Advisories

The trusted source for open source

Product

Solutions

Customers

Resources

Company