Approved changes feed: RSS · Atom

cpe:2.3:a:facebook:buck:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFacebook (c319c35a-3469-5baa-b3bd-8582d1206a92)
ProductBuck (3b03cde6-6910-57d9-a03c-a4220c5d5cfd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/facebook/buck purl2cpe 2026-06-01 10:11:42.967851

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6331 vulnerable 2026-06-03 14:39:00.146149 Details available
Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.
Published: 2018-12-31T23:00:00.000Z
Updated: 2025-05-06T15:46:07.371Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.