GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: gradle, apache-tika, spdx-tools-java, nextflow...

GHSA-R7WM-3CXJ-WFF9 vulnerabilities

Vulnerabilities for packages: dependency-track, spdx-tools-java, keycloak-config-cli, tez, apache-nifi-registry, cass-config-builder, wildfly, apicurio-registry, strimzi-kafka-operator, akhq, gradle, infinispan, flyway, opensearch, logstash...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: sonarqube, cassandra, pinot, opensearch, ruby3.3-jrjackson, spark-fips, gradle, nuxeo, confluent-kafka-jre-bcfips, flyway, elasticsearch-fips, thingsboard, camunda-zeebe, kafbat-ui-fips, zookeeper-fips, tez, apache-activemq, zookeeper, apache-tika, cassandra-fips,...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, jenkins-plugin-manager, apicurio-registry, akhq, gradle, tez, apache-nifi-registry, strimzi-kafka-operator, zookeeper, infinispan, scala, ruby3.3-jrjackson, thingsboard, druid, ruby3.2-jrjackson, opensearch, confluent-kafka, cassandra, apache-tik...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: confluent-kafka, thingsboard, keycloak-config-cli, tez, jenkins-plugin-manager, cassandra, zookeeper, akhq, gradle, druid, infinispan, sonarqube, ruby3.3-jrjackson, apache-tika, opensearch, logstash, ruby3.2-jrjackson, wavefront-proxy...

SUSE-SU-2024:1119-1 Security update for gradle, gradle-bootstrap

This update for gradle, gradle-bootstrap fixes the following issues: - CVE-2021-29429: Fixed information disclosure through temporary directory permissions bsc1184799. - CVE-2019-15052: Fixed authentication credentials disclosure bsc1145903. gradle: - Fixed RPM package building issues due to...

Ubuntu 18.04 ESM : Gradle vulnerabilities (USN-4858-1)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4858-1 advisory. It was discovered that Gradle used an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins were used. A...