{"id":"CGA-vhp2-2556-2487","modified":"2026-09-07T01:52:08.629401179Z","published":"2025-10-30T22:25:03Z","upstream":["CVE-2023-25193","GHSA-v8ff-vmc3-wr4m"],"references":[{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20230725-0006/"},{"type":"FIX","url":"https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc"},{"type":"WEB","url":"https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361"},{"type":"WEB","url":"https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25193.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25193"}],"affected":[{"package":{"name":"openjdk-19-jre","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-19-jre?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2.7-r6"}]}],"ecosystem_specific":{"components":[{"latest_event_status":"fixed","latest_event_timestamp":"2025-01-30T12:38:37Z","component_name":"openjdk-19-jre","component_version":"19.0.2.7-r3","component_type":"apk","component_location":"/.PKGINFO","component_purl":"pkg:apk/openjdk-19-jre@19.0.2.7-r3"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vhp2-2556-2487.json"}},{"package":{"name":"openjdk-19-jre","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-19-jre?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.2.7-r6"}]}],"ecosystem_specific":{"components":[{"component_type":"apk","component_location":"/.PKGINFO","component_purl":"pkg:apk/openjdk-19-jre@19.0.2.7-r3","latest_event_status":"fixed","latest_event_timestamp":"2025-01-30T12:38:37Z","component_name":"openjdk-19-jre","component_version":"19.0.2.7-r3"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vhp2-2556-2487.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}