GHSA-936V-CG49-M2G5 com.google.cloud.tools:jib-core vulnerable to Remote Code Execution (RCE)

The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution RCE via the isDockerInstalled function, due to attempting to execute input...

CVE-2022-25914

The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution RCE via the isDockerInstalled function, due to attempting to execute input...

CVE-2022-25914

CVE-2022-25914 affects the jib-core library from Google Cloud Tools (versions before 0.22.0). The impact is Remote Code Execution via the isDockerInstalled function when handling input, as documented across multiple sources (GHSA, NVD, OSV). Affected component: com.google.cloud.tools:jib-core; ro...