{"id":"CGA-9ccf-g87f-6wpf","modified":"2026-09-07T01:31:09.971027015Z","published":"2026-09-04T16:48:21Z","upstream":["CVE-2018-11771","GHSA-hrmr-f5m6-m9pq"],"references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/105139"},{"type":"WEB","url":"https://lists.apache.org/thread.html/3565494c263dfeb4dcb2a71cb24d09a1ca285cd6ac74edc025a3af8a%40%3Ccommits.tinkerpop.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/b8da751fc0ca949534cdf2744111da6bb0349d2798fac94b0a50f330%40%3Cannounce.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/f28052d04cb8dbaae39bfd3dc8438e58c2a8be306a3f381f4728d7c1%40%3Ccommits.commons.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E"},{"type":"WEB","url":"http://www.securitytracker.com/id/1041503"},{"type":"WEB","url":"https://lists.apache.org/thread.html/714c6ac1b1b50f8557e7342903ef45f1538a7bc60a0b47d6e48c273d%40%3Ccommits.tinkerpop.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/c7954dc1e8fafd7ca1449f078953b419ebf8936e087f235f3bd024be%40%3Ccommits.tinkerpop.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/35f60d6d0407c13c39411038ba1aca71d92595ed7041beff4d07f2ee%40%3Ccommits.tinkerpop.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/b8ef29df0f1d55aa741170748352ae8e425c7b1d286b2f257711a2dd%40%3Cdev.creadur.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/b907e70bc422905d7962fd18f863f746bf7b4e7ed9da25c148580c61%40%3Cnotifications.commons.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/e3eae9e6fc021c4c22dda59a335d21c12eecab480b48115a2f098ef6%40%3Ccommits.tinkerpop.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/f9cdd32af7d73e943452167d15801db39e8130409ebb9efb243b3f41%40%3Ccommits.tinkerpop.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/0adb631517766e793e18a59723e2df08ced41eb9a57478f14781c9f7%40%3Cdev.tinkerpop.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/6c79965066c30d4e330e04d911d3761db41b82c89ae38d9a6b37a6f1%40%3Cdev.tinkerpop.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/eeecc1669242b28a3777ae13c68b376b0148d589d3d8170340d61120%40%3Cdev.tinkerpop.apache.org%3E"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujan2022.html"}],"affected":[{"package":{"name":"eco-java-gradle-4.2.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/eco-java-gradle-4.2.1?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"component_version":"1.14","component_type":"java-archive","component_location":"/usr/lib/gradle/4.2.1/lib/commons-compress-1.14.jar","component_purl":"pkg:maven/commons-compress@1.14","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-09-04T16:49:01Z","component_name":"commons-compress"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9ccf-g87f-6wpf.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}