> For the complete documentation index, see [llms.txt](https://mariadb.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mariadb.com/docs/gridgain/gridgain-8/security/hardening-and-compliance/cve.md).

# Security Vulnerabilities (CVE)

Full list of CVEs fixed across all GridGain 8 versions, with published dates, CVSS base scores, and the releases that contain each fix.

This page contains a full list of CVEs fixed in all versions and series of GridGain 8.

The list is updated continuously. CVEs may be added retroactively to already-released versions, as vulnerabilities can be reported to and assigned by CVE Numbering Authorities (CNAs) after the corresponding fix has been released. As a result, a release may receive additional CVE entries over time even after it has been published.

A release can also fix vulnerabilities that do not yet have a CVE identifier. Advisories still awaiting an identifier appear in the release notes, and each is added here once a CVE identifier is assigned.

| CVE ID                                                            | CVE Published | CVSS base score (v3.1) | GridGain 8 Releases                                                                                                                                                                                                                                                                                                                               |
| ----------------------------------------------------------------- | ------------- | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [CVE-2025-48977](https://www.cve.org/CVERecord?id=CVE-2025-48977) | 2026-05-28    | 6.5                    | [8.9.21](https://www.gridgain.com/docs/gridgain8/latest/release-notes/8.9.21/release-notes_8.9.21) (2025-06-06)                                                                                                                                                                                                                                   |
| [CVE-2024-52577](https://www.cve.org/CVERecord?id=CVE-2024-52577) | 2025-02-14    | 9.0[^1]                | [8.9.18](https://www.gridgain.com/docs/gridgain8/latest/release-notes/8.9.18/release-notes_8.9.18) (2025-03-14)                                                                                                                                                                                                                                   |
| [CVE-2021-28163](https://www.cve.org/CVERecord?id=CVE-2021-28163) | 2021-04-01    | 2.7                    | [8.8.4](https://www.gridgain.com/docs/gridgain8/latest/release-notes/8.8.4/release-notes_8.8.4) (2021-04-22), [8.7.35](https://www.gridgain.com/docs/gridgain8/latest/release-notes/8.7.35/release-notes_8.7.35) (2021-04-22)                                                                                                                     |
| [CVE-2020-1963](https://www.cve.org/CVERecord?id=CVE-2020-1963)   | 2020-06-03    | 9.1                    | [8.7.15](https://www.gridgain.com/docs/gridgain8/latest/release-notes/8.7.15/release-notes_8.7.15) (2020-04-24), [8.5.19](https://www.gridgain.com/docs/gridgain8/latest/release-notes/8.5.19/release-notes_8.5.19) (2020-04-27), [8.4.17](https://www.gridgain.com/docs/gridgain8/latest/release-notes/8.4.17/release-notes_8.4.17) (2020-04-24) |
| [CVE-2018-8018](https://www.cve.org/CVERecord?id=CVE-2018-8018)   | 2018-07-19    | 9.8[^2]                | 8.5.3 (2018-11-02), 8.4.8 (2018-08-10)                                                                                                                                                                                                                                                                                                            |
| [CVE-2018-1274](https://www.cve.org/CVERecord?id=CVE-2018-1274)   | 2018-04-18    | 7.5[^2]                | 8.5.3 (2018-11-02), 8.4.8 (2018-08-10)                                                                                                                                                                                                                                                                                                            |
| [CVE-2018-1273](https://www.cve.org/CVERecord?id=CVE-2018-1273)   | 2018-04-11    | 9.8[^2]                | 8.5.3 (2018-11-02), 8.4.8 (2018-08-10)                                                                                                                                                                                                                                                                                                            |
| [CVE-2018-1295](https://www.cve.org/CVERecord?id=CVE-2018-1295)   | 2018-04-02    | 9.8[^2]                | 8.4.3 (2018-03-21), 8.3.4 (2018-03-28)                                                                                                                                                                                                                                                                                                            |
| [CVE-2017-14614](https://www.cve.org/CVERecord?id=CVE-2017-14614) | 2017-10-09    | 6.5[^2]                | 8.1.5 (2017-09-29)                                                                                                                                                                                                                                                                                                                                |

[^1]: NVD CVSS v3.1 base score. The Apache Software Foundation (CNA) rates this CVE 9.8 (v3.1) / 9.5 (v4.0).

[^2]: NVD CVSS v3.0 base score; no v3.1 score has been published for this CVE.