CVE-2026-76228

A flaw was found in Renovate. This command injection vulnerability occurs when Renovate processes Gradle Wrapper updates. An attacker can introduce a malicious gradle-wrapper.properties file into a scanned repository, where a specially crafted distributionUrl containing shell command substitution...

CVE-2026-76228

Renovate versions =32.124.0 and before 42.68.5 and Mend renovate-ce/renovate-ee before 13.3.0 contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell e.g. /bin/sh -c ... ./gradle...

CVE-2026-76228 Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper

Renovate versions =32.124.0 and before 42.68.5 and Mend renovate-ce/renovate-ee before 13.3.0 contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell e.g. /bin/sh -c ... ./gradle...

CVE-2026-76228 Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper

Renovate versions =32.124.0 and before 42.68.5 and Mend renovate-ce/renovate-ee before 13.3.0 contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell e.g. /bin/sh -c ... ./gradle...

EUVD-2026-62469

Renovate versions =32.124.0 and before 42.68.5 and Mend renovate-ce/renovate-ee before 13.3.0 contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell e.g. /bin/sh -c ... ./gradle...

CVE-2026-76228

Renovate versions >=32.124.0 before 42.68.5 (and Mend renovate-ce/renovate-ee before 13.3.0) pass attacker-controlled distributionUrl values from gradle-wrapper.properties directly into a shell command (/bin/sh -c ... ./gradlew :wrapper --gradle-distribution-url ), allowing shell command subst...

GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: scala, copybara, elasticsearch, conductor-fips, apache-hop-fips, wazuh-indexer, conductor, apache-tika-fips, gradle, opensearch, spdx-tools-java, apache-tika, nextflow, metabase, jbang, elasticsearch-fips, apache-hop, copybara-fips, opensearch-fips...

CVE-2026-71497 vulnerabilities

Vulnerabilities for packages: scala, copybara, elasticsearch, conductor-fips, apache-hop-fips, wazuh-indexer, conductor, apache-tika-fips, gradle, opensearch, spdx-tools-java, apache-tika, nextflow, metabase, jbang, elasticsearch-fips, apache-hop, copybara-fips, opensearch-fips...

GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: nextflow, gradle, apache-tika, spdx-tools-java, opensearch...

CVE-2026-71497 vulnerabilities

Vulnerabilities for packages: nextflow, gradle, apache-tika, spdx-tools-java, opensearch...

GHSA-R7WM-3CXJ-WFF9 vulnerabilities

Vulnerabilities for packages: apicurio-registry, tez, scala, spark, dependency-track, flyway, apache-nifi, infinispan, druid, keycloak-config-cli, spdx-tools-java, akhq, wildfly, apache-nifi-registry, cass-config-builder, logstash, sonarqube, gradle, strimzi-kafka-operator, opensearch...

GHSA-5GVW-P9QM-JGWH vulnerabilities

Vulnerabilities for packages: scala, knative-kafka-broker-fips, logstash, airbyte-server-fips, flyway-fips, nacos-docker, pinot-fips, ruby3.2-jrjackson, druid, elasticsearch, keycloak-config-cli, akhq, seata, camunda, apache-nifi, hono, wavefront-proxy, spark-fips, zookeeper-fips, pinot,...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, logstash, airbyte-server-fips, flyway-fips, nacos-docker, pinot-fips, ruby3.2-jrjackson, druid, elasticsearch, keycloak-config-cli, akhq, seata, camunda, apache-nifi, hono, wavefront-proxy, spark-fips, zookeeper-fips, pinot, logstash-fips,...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: scala, knative-kafka-broker-fips, logstash, airbyte-server-fips, flyway-fips, nacos-docker, pinot-fips, ruby3.2-jrjackson, druid, elasticsearch, keycloak-config-cli, akhq, seata, camunda, apache-nifi, hono, wavefront-proxy, spark-fips, zookeeper-fips, pinot,...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: apicurio-registry, tez, apache-tika, scala, spark, ruby3.2-jrjackson, jenkins-plugin-manager, flyway, apache-nifi, infinispan, druid, keycloak-config-cli, akhq, apache-nifi-registry, confluent-kafka, logstash, wavefront-proxy, sonarqube, thingsboard, cassandra, gradl...

GHSA-5GVW-P9QM-JGWH vulnerabilities

Vulnerabilities for packages: apicurio-registry, tez, apache-tika, scala, spark, ruby3.2-jrjackson, jenkins-plugin-manager, flyway, apache-nifi, infinispan, druid, keycloak-config-cli, akhq, apache-nifi-registry, confluent-kafka, logstash, wavefront-proxy, sonarqube, thingsboard, cassandra, gradl...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: tez, apache-tika, spark, ruby3.2-jrjackson, jenkins-plugin-manager, flyway, infinispan, druid, keycloak-config-cli, akhq, confluent-kafka, logstash, wavefront-proxy, sonarqube, thingsboard, cassandra, gradle, ruby3.3-jrjackson, zookeeper, opensearch...

Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE

Summary Nuclio's Java runtime generates a build.gradle file during function builds using Go's text/template package. The template renders runtimeAttributes.repositories values with the . action, which performs no escaping. An attacker can embed a closing brace to break out of the repositories blo...

PT-2026-60684

Name of the Vulnerable Software and Affected Versions Nuclio versions prior to 1.16.5 Description Nuclio's Java runtime is susceptible to code injection during the function build process. The issue occurs because the createGradleBuildScript function uses the Go text/template package to generate a...

CVE-2026-42049

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A malicious APK can break out of the...