{"id":"CGA-28fc-qcvv-vpfj","modified":"2026-07-17T18:28:25.210353711Z","published":"2025-10-30T20:27:48Z","upstream":["CVE-2020-14556","GHSA-862j-pwc6-mxj9"],"references":[{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQUMIAON2YEFRONMIUVHAKYCIOLICDBA/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4453-1/"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00021.html"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4433-1/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202209-15"},{"type":"ADVISORY","url":"https://www.debian.org/security/2020/dsa-4734"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFJPOYF3CWYEPCDOAOCNFJTQIKKWPHW/"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202008-24"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20200717-0005/"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujul2020.html"}],"affected":[{"package":{"name":"openjdk-9-jre","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/openjdk-9-jre?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"latest_event_status":"detection","latest_event_timestamp":"2025-08-06T08:21:16Z","architecture":"x86_64","component_name":"openjdk-9-jre","component_version":"9.0.4-r7","component_type":"apk","component_location":"/.PKGINFO","component_purl":"pkg:apk/openjdk-9-jre@9.0.4-r7"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-28fc-qcvv-vpfj.json"}},{"package":{"name":"openjdk-9-jre","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/openjdk-9-jre?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"component_purl":"pkg:apk/openjdk-9-jre@9.0.4-r7","latest_event_status":"detection","latest_event_timestamp":"2025-08-06T08:21:16Z","architecture":"x86_64","component_name":"openjdk-9-jre","component_version":"9.0.4-r7","component_type":"apk","component_location":"/.PKGINFO"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-28fc-qcvv-vpfj.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}