CGA-xf7g-2h39-r54g

Published

Last updated

Package

logstash-jre-bcfips

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

5.9

Medium

CVSS CVSS_V3

Status

Pending upstream fix

Impact

Logstash bundles an upstream version of jruby. Upstream jruby should fix this vulnerability as it updates its default gems on some next release.

Status

Under investigation

Status

Fixed

Fixed version

8.13.4-r0

Status

Pending upstream fix

Impact

Logstash bundles an upstream version of jruby. Upstream jruby should fix this vulnerability as it updates its default gems on some next release.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™