EUVD-2023-3004

Malicious code in bioql PyPI...

ar.com.fdvs:dynamicjasper (>=5.0.0, <=5.0.8), com.alexnederlof:jasperreports-plugin (>=1.7, <=1.9) +5 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (5.2.0)

net.sf.jasperreports:jasperreports MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - ar.com.fdvs:dynamicjasper =5.0.0, =1.7, =0.1.0, =0.1.0, =3.1.5, =3.1.5, =3.1.5, =3.1.6 Sour...

CVE-2023-39152

Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked i.e., replaced with asterisks in the build log in some circumstances...

CVE-2021-21361

The com.bmuschko:gradle-vagrant-plugin Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors. This is fixe...

com.deepoove:poi-tl (0.0.3), com.github.kulya:jmeter-gradle-plugin (1.3.4-2.12) +25 more potentially affected by CVE-2025-31672 via org.apache.poi:poi-ooxml (3.11-beta2)

org.apache.poi:poi-ooxml MAVEN version 3.11-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi-ooxml and may be impacted: - com.deepoove:poi-tl 0.0.3 - com.github.kulya:jmeter-gradle-plugin 1.3.4-2.12 -...

com.squareup.wire:wire-compiler (3.3.0), com.squareup.wire:wire-gradle-plugin (3.3.0) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.3.0)

com.squareup.wire:wire-runtime MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.3.0 - com.squareup.wire:wire-gradle-plugin 3.3.0 -...

com.squareup.wire:wire-compiler (4.0.0-alpha.2), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.2) +13 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.2)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.2 - com.squareup.wire:wire-gradle-plugin...

com.github.jg513:webpb-spring (0.0.4), com.squareup.wire:wire-compiler (3.2.2) +17 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.2.2)

com.squareup.wire:wire-runtime MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.jg513:webpb-spring 0.0.4 - com.squareup.wire:wire-compiler 3.2.2 -...

com.squareup.wire:wire-compiler (3.3.0-alpha1), com.squareup.wire:wire-gradle-plugin (3.3.0-alpha1) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.3.0-alpha1)

com.squareup.wire:wire-runtime MAVEN version 3.3.0-alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.3.0-alpha1 - com.squareup.wire:wire-gradle-plugin...

com.squareup.wire:wire-compiler (4.0.0-alpha.6), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.6) +13 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.6)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.6 - com.squareup.wire:wire-gradle-plugin...

com.jiechic.library.wire:wire-gradle-plugin (>=1.0.0, <=1.0.1), com.squareup.wire:wire-codegen-sample (2.1.2) +9 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.1.2)

com.squareup.wire:wire-runtime MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.jiechic.library.wire:wire-gradle-plugin =1.0.0, =0.6.6, =2.0.0.m5, =2.0.0.m5, =2.0.0.m7 Source...

com.squareup.wire:proto-pruner (3.0.2), com.squareup.wire:wire-codegen-sample (3.0.2) +18 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.0.2)

com.squareup.wire:wire-runtime MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:proto-pruner 3.0.2 - com.squareup.wire:wire-codegen-sample 3.0.2 -...

com.squareup.wire:proto-pruner (3.0.0-rc03), com.squareup.wire:wire-codegen-sample (3.0.0-rc03) +11 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.0.0-rc03)

com.squareup.wire:wire-runtime MAVEN version 3.0.0-rc03 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:proto-pruner 3.0.0-rc03 - com.squareup.wire:wire-codegen-sample 3.0.0-rc03 -...

com.squareup.wire:wire-compiler (3.2.1), com.squareup.wire:wire-gradle-plugin (3.2.1) +7 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.2.1)

com.squareup.wire:wire-runtime MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.2.1 - com.squareup.wire:wire-gradle-plugin 3.2.1 -...

com.squareup.wire:wire-compiler (4.0.0-alpha.3), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.3) +13 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.3)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.3 - com.squareup.wire:wire-gradle-plugin...

Linux Distros Unpatched Vulnerability : CVE-2019-16370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has th...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (2.2.3), gg.jte:jte (2.2.3) +6 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (2.2.3)

gg.jte:jte-runtime MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin 2.2.3 - gg.jte:jte 2.2.3 - gg.jte:jte-gradle-plugin 2.2.3 -...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (2.2.6), gg.jte:jte (2.2.6) +5 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (2.2.6)

gg.jte:jte-runtime MAVEN version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin 2.2.6 - gg.jte:jte 2.2.6 - gg.jte:jte-gradle-plugin 2.2.6 -...

com.mreil:gradle-test-utils (0.0.2), gg.jte.gradle:gg.jte.gradle.gradle.plugin (2.3.2) +11 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (2.3.2)

gg.jte:jte-runtime MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - com.mreil:gradle-test-utils 0.0.2 - gg.jte.gradle:gg.jte.gradle.gradle.plugin 2.3.2 - gg.jte:jte 2.3.2 -...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (1.6.0), gg.jte:jte-gradle-plugin (1.6.0) +3 more potentially affected by CVE-2025-23026 via gg.jte:jte (1.6.0)

gg.jte:jte MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin 1.6.0 - gg.jte:jte-gradle-plugin 1.6.0 - gg.jte:jte-maven-plugin 1.6.0 -...