# Java 8 version vulnerability in nexus repository docker image

**URL:** <https://community.sonatype.com/t/java-8-version-vulnerability-in-nexus-repository-docker-image/8230>\
**Category:** Sonatype Nexus Repository\
**Tags:** help, nexus-repository\
**Created:** [February 11, 2022, 5:54am UTC](https://community.sonatype.com/t/java-8-version-vulnerability-in-nexus-repository-docker-image/8230 "2022-02-11T05:54:33Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![anis.n.shaikh](https://avatars.discourse-cdn.com/v4/letter/a/c5a1d2/32.png) [@anis.n.shaikh](https://community.sonatype.com/u/anis.n.shaikh)\
**Post date:** [February 11, 2022, 5:54am UTC](https://community.sonatype.com/t/java-8-version-vulnerability-in-nexus-repository-docker-image/8230/1 "2022-02-11T05:54:33Z")

</div>

Hi team,

We are using nexus 3.29.0 docker image as docker image repository and maven repository.  
One of our customers reported java version 1.8.0.272 vulnerability for nexus docker image.

We have tried to upgrade subversion of java-1.8 inside nexus from 1.8.0.272 to 1.8.0.312 following are the observation of the upgrade

1. It directly upgraded to 1.8.0.322.
2. We tried to manually upgrade the java-1.8.0.312 which resulted in downgrade of some OS components ( **libgif.so.4** , **libpng15.so.15** , **libpng15.so.15(PNG15\_0)**).  
Though 1.8.0.322 works well in our dev environment but we are not sure how it will work in prod environment.

So we would need your help in understanding nexus’s plan to support of latest versions of Java 8.

---

_[View the full topic](https://community.sonatype.com/t/java-8-version-vulnerability-in-nexus-repository-docker-image/8230)._