CVE-2022-25914: Jib Project Jib

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.

Affected products

• Jib Project Jib: before 0.22.0 (fixed in 0.22.0)

Published 2022-09-08. Last modified 2026-06-17.