Advisories · Technology
gradle.
Every CVE that names gradle among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts
- gradle
- CWE-494
- CWE-829
- CVSS 8.6 High
Gradle fails to disable repositories which can expose builds to malicious artifacts
- gradle
- CWE-494
- CWE-829
- CVSS 8.8 High
Gradle vulnerable to local privilege escalation through system temporary directory
- gradle
- CWE-378
- CWE-379
- CVSS 6.8 Medium
Possible local file exfiltration by XML External entity injection
- gradle
- XML external entities (XXE)
- CVSS 3.2 Low
Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations
- gradle
- Broken access control
- CVSS 6.9 Medium
Dependency cache path traversal in Gradle
- gradle
- Path traversal
- CVSS 6.9 Medium
Path traversal vulnerabilities in handling of Tar archives in Gradle
- gradle
- Path traversal
- CVSS 6.6 Medium
Gradle usage of long IDs for PGP keys opens potential for collision attacks
- gradle
- CWE-829
- CVSS 6.6 Medium
Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed
- gradle
- CWE-829
- CVSS 7.5 High
Dependency verification bypass in Gradle
- gradle
- CWE-829
- CVSS 7.5 High
Arbitrary code execution via specially crafted environment variables
- gradle
- Command injection
- CVSS 8.0 High
Repository content filters do not work in Settings pluginManagement
- gradle
- CWE-829
- CVSS 8.8 High
Local privilege escalation through system temporary directory
- gradle
- CWE-378
- CWE-379
- CVSS 4.0 Medium
Information disclosure through temporary directory permissions
- gradle
- CWE-377