CVE-2022-24329
Fixed in a distro release EPSS 2%
In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.
Products: jetbrains kotlin, oracle communications_cloud_native_core_binding_support_function, oracle communications_pricing_design_center
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jetbrains.kotlin:kotlin-stdlib | 1.6.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | eco-java-gradle-3.0 | no fix |
| Chainguard | eco-java-gradle-3.1 | no fix |
| Chainguard | eco-java-gradle-3.2 | no fix |
| Chainguard | eco-java-gradle-3.2.1 | no fix |
| Chainguard | eco-java-gradle-3.3 | no fix |
| Chainguard | eco-java-gradle-3.4 | no fix |
| Chainguard | eco-java-gradle-3.4.1 | no fix |
| Chainguard | eco-java-gradle-3.5 | no fix |
| Chainguard | eco-java-gradle-3.5.1 | no fix |
| Chainguard | eco-java-gradle-4.0 | no fix |
| Chainguard | eco-java-gradle-4.0.1 | no fix |
| Chainguard | eco-java-gradle-4.0.2 | no fix |
| Chainguard | thingsboard | 3.7-r1 |
| Chainguard | thingsboard-tb-js-executor | 3.7-r1 |
| Chainguard | thingsboard-tb-mqtt-transport | 3.7-r1 |
| Chainguard | thingsboard-tb-node | 3.7-r1 |
| Chainguard | thingsboard-tb-web-ui | 3.7-r1 |
| Ubuntu 22.04 LTS | kotlin | no fix |
| Ubuntu 24.04 LTS | kotlin | no fix |
| Ubuntu 25.10 | kotlin | no fix |
| Ubuntu 26.04 LTS | kotlin | no fix |
| Ubuntu 26.10 | kotlin | no fix |
| Wolfi | thingsboard | 3.7-r1 |
| Wolfi | thingsboard-tb-js-executor | 3.7-r1 |
| Wolfi | thingsboard-tb-mqtt-transport | 3.7-r1 |
| Wolfi | thingsboard-tb-node | 3.7-r1 |
| Wolfi | thingsboard-tb-web-ui | 3.7-r1 |