/

Directory Security Advisories Pricing

Security Advisories

CGA-cj2r-r6x5-33f2

Published

Last updated

https://images.chainguard.dev/security/CGA-cj2r-r6x5-33f2

Package

gradle-8

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

4.3

Medium

CVSS V3

References

Updates

Status

Pending upstream fix

Impact

net.i2p.crypto.eddsa 0.3.0 is a transitive dependency via org.eclipse.jgit.ssh.apache. Once https://github.com/eclipse-jgit/jgit/commit/4bd76e6bc91b588b925120945669db1e2b48ab45 is included in a release, a new gradle-8 release will be required to upgrade to it.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.