67 matches found
@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)
shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: SNYK:JS-SHESCAPE-18752068...
@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)
shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: OSV:GHSA-GM3R-Q2WP-HW87...
@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by unknown CVE via shescape (>=2.1.11, <=2.1.12)
shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319522...
GHSA-J8MX-J73W-9MXW Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability
A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...
Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability
A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...
CVE-2026-7860
A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...
CVE-2026-7860 Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build
A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...
CVE-2026-7860
CVE-2026-7860 describes an information-disclosure risk in Vaadin build tools: Vaadin Maven/Gradle plugins can print the full set of environment variables to build logs when a frontend build fails (non-zero exit). This can expose credentials/secrets in CI logs and artifacts. Affected ranges and fi...
CVE-2026-7860 Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build
A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...
PT-2026-41882
A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...
EUVD-2026-1980
Malicious code in gradle-plugin npm...
Malicious Package
Overview gradle-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in gradle-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2250213d706eee1473dafe9b75172ac8e22adbf885bf28e4b2b85270de1ffbc8 The package gradle-plugin was found to contain malicious code. Source: ghsa-malware 0d6c8dc0207f1992c957598d80609ff61b750f041d94dde7984a3e0a6133d54e...
MAL-2026-221 Malicious code in gradle-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2250213d706eee1473dafe9b75172ac8e22adbf885bf28e4b2b85270de1ffbc8 The package gradle-plugin was found to contain malicious code. Source: ghsa-malware 0d6c8dc0207f1992c957598d80609ff61b750f041d94dde7984a3e0a6133d54e...
CVE-2020-7599
All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is public...
EUVD-2021-0678
Malware in sbrugna...
EUVD-2023-3004
Malicious code in bioql PyPI...
EUVD-2022-3634
Malicious code in bioql PyPI...