/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-gr35-gp4q-q78f

Published

Last updated

https://images.chainguard.dev/security/CGA-gr35-gp4q-q78f
Package

gradle-8

RepositoryWolfi
Latest Update
Fixed
Fixed Version

8.7.0-r1

Aliases
  • CVE-2024-25710
  • GHSA-4g9r-vxhx-9pgx

Severity

5.5

Medium

CVSS CVSS_V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-25710

Updates

Status

Fixed

Fixed version

8.7.0-r1

Status

Pending upstream fix

Impact

The upstream project is planning a fix (https://github.com/gradle/gradle/pull/27666/files#diff-46a9cba02b57c005bb1da344ce6c71d7611894853c2a72272e4681c3158c202e). Chainguard won't provide a fix ahead of upstream due to the following notice: "This change may affect the checksums of the produced jars, zips, and other archive types because the metadata of the produced artifacts may differ."

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing