/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-8jc5-84hh-9gp4

Published

Last updated

https://images.chainguard.dev/security/CGA-8jc5-84hh-9gp4
Package

graalvm-23

Repository

Chainguard

Latest Update
Not affected
Aliases
  • CVE-2025-64756
  • GHSA-5j98-mcp5-4vw2

Severity

7.5

High

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-64756
  • https://github.com/advisories/GHSA-5j98-mcp5-4vw2

Updates

Status

Not affected

Justification

Vulnerable code not in execute path

Impact

This CVE affects only the glob CLI and does not affect the javascript API.

Status

Under investigation

The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSGolden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsChainguard CoursesDocumentationTrust Center

Company

About UsBlogPartnersNewsroomCareersLegal