biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin (1.6.3), ch.rasc:embeddedtc-maven-plugin (>=1.0, <=1.6) +1499 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.6)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - biz.gabrys.forks.com.samaxes.maven:minify-maven-plugin 1.6.3 - ch.rasc:embeddedtc-maven-plugin...

com.enonic.xp.app:com.enonic.xp.app.gradle.plugin (>=1.0.5, <=2.0.0), com.enonic.xp.base:com.enonic.xp.base.gradle.plugin (>=1.0.5, <=2.0.0) +4 more potentially affected by CVE-2025-59952 via io.minio:minio (3.0.5)

io.minio:minio MAVEN version 3.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.minio:minio and may be impacted: - com.enonic.xp.app:com.enonic.xp.app.gradle.plugin =1.0.5, =1.0.5, =1.0.5, =1.0.5, =1.0.16, =1.0.5, =1.0.15 Source cves:...

BIT-GRADLE-2021-29427 Repository content filters do not work in Settings pluginManagement

In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/or dependency poisoning. Repository content filtering is a security control Gradle introduced to help users specify what repositories are used to resolve specific dependencies...

CVE-2021-29427

CVE-2021-29427 affects Gradle when using repository content filtering inside a settings file, specifically within a pluginManagement block. Versions 5.1 up to before 7.0 may ignore content filters and search all repositories, potentially allowing information disclosure (external repository hints)...