/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-gp4f-pvwr-2rc6

Published

Last updated

https://images.chainguard.dev/security/CGA-gp4f-pvwr-2rc6
Package

gradle-8

RepositoryWolfi
Latest Update
Fixed
Fixed Version

8.7.0-r1

Aliases
  • CVE-2024-26308
  • GHSA-4265-ccf5-phj5

Severity

5.5

Medium

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-26308

Updates

Status

Fixed

Fixed version

8.7.0-r1

Status

Pending upstream fix

Impact

The upstream project is planning a fix (https://github.com/gradle/gradle/pull/27666/files#diff-46a9cba02b57c005bb1da344ce6c71d7611894853c2a72272e4681c3158c202e). Chainguard won't provide a fix ahead of upstream due to the following notice: "This change may affect the checksums of the produced jars, zips, and other archive types because the metadata of the produced artifacts may differ."

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing