org.jetbrains.kotlin.konan:org.jetbrains.kotlin.konan.gradle.plugin (0.9), org.jetbrains.kotlin.native:org.jetbrains.kotlin.native.gradle.plugin (0.9) +2 more potentially affected by CVE-2026-53914 via org.jetbrains.kotlin:kotlin-gradle-plugin (0.9.0-native)

org.jetbrains.kotlin:kotlin-gradle-plugin MAVEN version 0.9.0-native is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-gradle-plugin and may be impacted: - org.jetbrains.kotlin.konan:org.jetbrains.kotlin.konan.gradle.plugin 0....

ai.exida.stig-settings:ai.exida.stig-settings.gradle.plugin (>=1.0.0, <=2.1.1), ai.exida.stig:ai.exida.stig.gradle.plugin (>=1.0.0, <=2.1.1) +1687 more potentially affected by CVE-2026-53914 via org.jetbrains.kotlin:kotlin-gradle-plugin (>=0.1.1.2-5-test-2, <=2.4.10)

org.jetbrains.kotlin:kotlin-gradle-plugin MAVEN version =0.1.1.2-5-test-2, =1.0.0, =1.0.0, =1.0.0, =1.0.0-alpha10, =1.2.0-alpha12, =1.2.0-alpha12, =1.2.0-alpha12, =1.2.0-alpha12, =1.2.0-alpha12, =2.4.0-alpha01, =2.4.0-alpha01, =2.0.0-rc02, =1.0.0-alpha0...

Information Disclosure

Vaadin Maven Plugin and Vaadin Gradle Plugin are vulnerable to information disclosure. The vulnerability is due to the plugins logging the complete set of environment variables when the frontend build process fails with a non-zero exit status, which allows an attacker to obtain sensitive...

com.graphql-java-generator.graphql-gradle-plugin:com.graphql-java-generator.graphql-gradle-plugin.gradle.plugin (>=2.0rc1, <=2.0), com.graphql-java-generator:graphql-gradle-plugin (>=2.0rc1, <=2.0) +42 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=1.0.0, <=1.0.6)

org.springframework.graphql:spring-graphql MAVEN version =1.0.0, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0 - com.graphql-java-generator:graphql-maven-plugin-samples-allgraphqlcases-client 2.0rc1 -...

com.graphql-java-generator.graphql-gradle-plugin:com.graphql-java-generator.graphql-gradle-plugin.gradle.plugin (>=2.0rc1, <=2.0), com.graphql-java-generator:graphql-gradle-plugin (>=2.0rc1, <=2.0) +42 more potentially affected by CVE-2026-41700 via org.springframework.graphql:spring-graphql (>=1.0.0, <=1.0.6)

org.springframework.graphql:spring-graphql MAVEN version =1.0.0, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0 - com.graphql-java-generator:graphql-maven-plugin-samples-allgraphqlcases-client 2.0rc1 -...

com.netas.jmeter:com.netas.jmeter.gradle.plugin (>=1.0.0-2.13, <=1.0.3-2.13), gradle.plugin.com.netas.jmeter:jmeter-gradle-plugin (>=1.0.0-2.13, <=1.0.3-2.13) +98 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6)

org.springframework:spring-jms MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.netas.jmeter:com.netas.jmeter.gradle.plugin =1.0.0-2.13, =1.0.0-2.13, =1.0.5-2.13, =1.1.3, =0.1...

com.korwe:kordapt-core (>=1.0.1, <=1.1.2), com.korwe:kordapt-gradle-plugin (>=1.0.1, <=1.1.2) +17 more potentially affected by CVE-2026-47065 via org.apache.mina:mina-core (1.0.1)

org.apache.mina:mina-core MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - com.korwe:kordapt-core =1.0.1, =1.0.1, =1.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0, =1.5.0, =2.9.8 -...

app.cash.barber:barber (>=0.2.0, <=0.3.3), com.squareup.wire:wire-compiler (3.4.0) +9 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.4.0)

com.squareup.wire:wire-runtime MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.barber:barber =0.2.0, =0.3.3 - com.squareup.wire:wire-compiler 3.4.0 -...

com.squareup.wire:wire-compiler (3.6.1), com.squareup.wire:wire-gradle-plugin (3.6.1) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.6.1)

com.squareup.wire:wire-runtime MAVEN version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.6.1 - com.squareup.wire:wire-gradle-plugin 3.6.1 -...

com.squareup.wire:wire-compiler (4.0.0-alpha.1), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.1) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.1)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.1 - com.squareup.wire:wire-gradle-plugin...

com.squareup.wire:wire-compiler (4.0.0-alpha.2), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.2) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.2)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.2 - com.squareup.wire:wire-gradle-plugin...

com.squareup.wire:wire-compiler (4.0.0-alpha.6), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.6) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.6)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.6 - com.squareup.wire:wire-gradle-plugin...

com.squareup.wire:wire-compiler (3.3.0), com.squareup.wire:wire-gradle-plugin (3.3.0) +8 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.3.0)

com.squareup.wire:wire-runtime MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.3.0 - com.squareup.wire:wire-gradle-plugin 3.3.0 -...

com.squareup.wire:proto-pruner (3.0.0-rc02), com.squareup.wire:wire-codegen-sample (3.0.0-rc02) +11 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.0.0-rc02)

com.squareup.wire:wire-runtime MAVEN version 3.0.0-rc02 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:proto-pruner 3.0.0-rc02 - com.squareup.wire:wire-codegen-sample 3.0.0-rc02 -...

com.squareup.wire:wire-compiler (3.2.1), com.squareup.wire:wire-gradle-plugin (3.2.1) +7 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.2.1)

com.squareup.wire:wire-runtime MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.2.1 - com.squareup.wire:wire-gradle-plugin 3.2.1 -...

com.squareup.wire:wire-compiler (3.3.0-alpha1), com.squareup.wire:wire-gradle-plugin (3.3.0-alpha1) +8 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.3.0-alpha1)

com.squareup.wire:wire-runtime MAVEN version 3.3.0-alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.3.0-alpha1 - com.squareup.wire:wire-gradle-plugin...

build.buf:connect-library (0.0.0-test), build.buf:connect-library-pt (>=0.0.0-test1, <=0.0.0-test2) +18 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.4.1)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - build.buf:connect-library 0.0.0-test - build.buf:connect-library-pt =0.0.0-test1, =0.3.0,...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.5.1), com.squareup.wire:wire-compiler (4.5.1) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.5.1)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.5.1 - com.squareup.wire:wire-compiler...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.6.1), com.squareup.wire:wire-compiler (4.6.1) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.6.1)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.6.1 - com.squareup.wire:wire-compiler...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.9.2), com.squareup.wire:wire-compiler (4.9.2) +15 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.9.2)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.9.2 - com.squareup.wire:wire-compiler...