GR
Product
gradle
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 7Low 0
Watch
Add gradle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44387 | 6.5 | Oct 5 | Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations Affected: >= 7.6.0, < 7.6.3; < 8.4.0 |
| CVE-2019-16370 | 5.9 | Sep 16 | The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1… Affected: before 6.0 |
| CVE-2019-11065 | 5.9 | Apr 10 | Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used Affected: 1.4 through 5.3.1 |
| CVE-2023-35946 | 5.5 | Jun 30 | Dependency cache path traversal in Gradle Affected: < 7.6.2; >= 8.0, < 8.2 |
| CVE-2021-29429 | 5.5 | Apr 12 | Information disclosure through temporary directory permissions Affected: < 7.0 |
| CVE-2023-42445 | 5.3 | Oct 6 | Gradle is a build tool with a focus on build automation and support for multi-language development Affected: before 7.6.3; 8.0.0 before 8.4.0 |
| CVE-2022-31156 | 4.4 | Jul 14 | Gradle is a build tool Affected: 6.2.0 before 7.5.0 |
Showing 7