android-check

Android Check Static code analysis plugin for Android project. Usage Modifications in /build.gradle: buildscript repositories jcenter dependencies ... classpath 'com.noveogroup.android:check:1.2.5' ... Modifications in //build.gradle: apply plugin: 'com.noveogroup.android.check' Configuration...

creadur-rat-gradle

Apache RAT Release Audit Tool Gradle Plugin This plugin allows to run the Apache RAT release audit tool, focused on licenses. Installation In your build.gradle.kts file: plugins id"org.nosphere.apache.rat" version "0.8.1" Usage The plugin registers a task named rat that you can configure in your...

com.squareup.wire:wire-compiler (3.2.1), com.squareup.wire:wire-gradle-plugin (3.2.1) +7 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (3.2.1)

com.squareup.wire:wire-runtime MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.2.1 - com.squareup.wire:wire-gradle-plugin 3.2.1 -...

com.squareup.wire:proto-pruner (3.0.0-rc03), com.squareup.wire:wire-codegen-sample (3.0.0-rc03) +11 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (3.0.0-rc03)

com.squareup.wire:wire-runtime MAVEN version 3.0.0-rc03 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:proto-pruner 3.0.0-rc03 - com.squareup.wire:wire-codegen-sample 3.0.0-rc03 -...

com.squareup.wire:wire-compiler (3.3.0-alpha1), com.squareup.wire:wire-gradle-plugin (3.3.0-alpha1) +8 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (3.3.0-alpha1)

com.squareup.wire:wire-runtime MAVEN version 3.3.0-alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.3.0-alpha1 - com.squareup.wire:wire-gradle-plugin...

app.cash.backfila:client (0.1.3-20210127.1838-76ab4fc), app.cash.backfila:client-misk (0.1.3-20210127.1838-76ab4fc) +16 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (3.5.0)

com.squareup.wire:wire-runtime MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:client 0.1.3-20210127.1838-76ab4fc - app.cash.backfila:client-misk...

com.squareup.wire:wire-compiler (3.3.0), com.squareup.wire:wire-gradle-plugin (3.3.0) +8 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (3.3.0)

com.squareup.wire:wire-runtime MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.3.0 - com.squareup.wire:wire-gradle-plugin 3.3.0 -...

com.squareup.wire:wire-compiler (4.0.0-alpha.1), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.1) +13 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (4.0.0-alpha.1)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.1 - com.squareup.wire:wire-gradle-plugin...

com.squareup.wire:wire-compiler (4.0.0-alpha.3), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.3) +13 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (4.0.0-alpha.3)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.3 - com.squareup.wire:wire-gradle-plugin...

com.squareup.wire:wire-compiler (3.6.1), com.squareup.wire:wire-gradle-plugin (3.6.1) +12 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (3.6.1)

com.squareup.wire:wire-runtime MAVEN version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.6.1 - com.squareup.wire:wire-gradle-plugin 3.6.1 -...

CVE-2026-92132

Jenkins Gradle Plugin 2.19.1252.v15196b5a6e10 and earlier requests build scan data from the build scan link detected in the build log, even when a Develocity server URL is configured in the global configuration, allowing attackers able to control the build log to capture the Develocity access key...

EUVD-2026-80756

Jenkins Gradle Plugin 2.19.1252.v15196b5a6e10 and earlier requests build scan data from the build scan link detected in the build log, even when a Develocity server URL is configured in the global configuration, allowing attackers able to control the build log to capture the Develocity access key...

org.jenkins-ci.main:jenkins-test-harness-tools (2.2), org.jenkins-ci.plugins:artifactory (>=2.12.0, <=2.12.1) +1 more potentially affected by CVE-2026-92132 via org.jenkins-ci.plugins:gradle (>=1.15, <=1.24)

org.jenkins-ci.plugins:gradle MAVEN version =1.15, =2.12.0, =0.8.0, =0.20.0 Source cves: CVE-2026-92132 Source advisory: MEND:CVE-2026-92132...

CVE-2026-92132

Jenkins Gradle Plugin 2.19.1252.v15196b5a6e10 and earlier requests build scan data from the build scan link detected in the build log, even when a Develocity server URL is configured in the global configuration, allowing attackers able to control the build log to capture the Develocity access key...

CVE-2026-92132: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Jenkins Gradle Plugin 2.19.1252.v15196b5a6e10 and earlier requests build scan data from the build scan link detected in the build log, even when a Develocity server URL is configured in the global configuration, allowing attackers able to control the build log to capture the Develocity access key...

PT-2026-93775

Name of the Vulnerable Software and Affected Versions Jenkins Gradle Plugin versions prior to 2.19.1252.v15196b 5a 6e10 Description The plugin requests build scan data from links detected in the build log, regardless of whether a Develocity server URL is set in the global configuration. This allo...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: SNYK:JS-SHESCAPE-18752068...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: MEND:CVE-2026-73413...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: GHSA-GM3R-Q2WP-HW87...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by unknown CVE via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319522...