Vulnerabilities (CVE)

Filtered by vendor Gradle Subscribe
Filtered by product Gradle
Total 21 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-11065 2 Fedoraproject, Gradle 2 Fedora, Gradle 2024-11-21 4.3 MEDIUM 5.9 MEDIUM
Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site.