Description
The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | com.google.cloud.tools:jib-core | unspecified – < 0.22.0 | 0.22.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.google.cloud.tools:jib-core | < 0.22.0 | 0.22.0 | GHSA-936v-cg49-m2g5 |