Filters
Gradle EnterpriseIn Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installati…
9.8
First published (updated )
Gradle GradleThis is a collision attack on long IDs (64bits) for PGP keys. Users of dependency verification in G…
9.8
First published (updated )
Gradle EnterpriseGradle Enterprise before 2022.1 allows remote code execution if the installation process did not spe…
9.8
First published (updated )
Gradle EnterpriseIn Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymo…
9.3
First published (updated )
Gradle Build Cache NodeIn Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Gradle GradleThe HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the co…
9.8
First published (updated )
Gradle EnterpriseIn Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an …
9.8
First published (updated )
Gradle GradleObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a craf…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.