/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-6xf5-8645-9vr8

Published

Last updated

https://images.chainguard.dev/security/CGA-6xf5-8645-9vr8
Package

logstash-jre-bcfips

Repository

Chainguard

Latest Update
Fixed
Fixed Version

8.15.0-r0

Aliases
  • CVE-2023-36617
  • GHSA-hww2-5g85-429m

Severity

5.3

Medium

CVSS CVSS_V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2023-36617

Updates

Status

Fixed

Fixed version

8.15.0-r0

Status

Pending upstream fix

Impact

Logstash bundles an upstream version of jruby. Upstream jruby should fix this vulnerability as it updates its default gems on next release.


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing