https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:41:53.753707+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-177548 EUVD-2026-177548 2026-10-07T19:41:53.757778+00:00 EUVD-2026-177548 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25914 fkie_cve-2022-25914 2026-10-07T19:41:53.757811+00:00

The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.

 https://cve.radiocsirt.org/vuln/ghsa-936v-cg49-m2g5 GHSA-936v-cg49-m2g5 — com.google.cloud.tools:jib-core vulnerable to Remote Code Execution (RCE) 2026-10-07T19:41:53.757842+00:00

Affected: Maven: com.google.cloud.tools:jib-core

The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.

 https://cve.radiocsirt.org/vuln/gsd-2022-25914 gsd-2022-25914 2026-10-07T19:41:53.757867+00:00 gsd-2022-25914 https://cve.radiocsirt.org/vuln/rhsa-2023:0471 RHSA-2023:0471 — Red Hat Security Advisory: Migration Toolkit for Runtimes security update 2026-10-07T19:41:53.757881+00:00

nodejs-minimatch: ReDoS via the braceExpand function jib-core: RCE via the isDockerInstalled loader-utils: Regular expression denial of service jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing