gradle-8

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the gradle-8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L GHSA-pmhh-3w7g-xqp8	<8.14.5-r5
L Cross-site Scripting (XSS)	<8.14.5-r5
L GHSA-r7wm-3cxj-wff9	<8.14.5-r4
L GHSA-5jmj-h7xm-6q6v	<8.14.5-r3
L GHSA-5gvw-p9qm-jgwh	<8.14.5-r2
L GHSA-mhm7-754m-9p8w	<8.14.5-r2
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<8.14.5-r3
L Incorrect Authorization	<8.14.5-r2
L GHSA-hgj6-7826-r7m5	<8.14.5-r1
L GHSA-rmj7-2vxq-3g9f	<8.14.5-r1
L GHSA-j3rv-43j4-c7qm	<8.14.5-r1
L Incomplete Blacklist	<8.14.5-r1
L Server-Side Request Forgery (SSRF)	<8.14.5-r1
L Incomplete Blacklist	<8.14.5-r1
L CVE-2026-0636	<8.14.4-r4
L GHSA-cj8j-37rh-8475	<8.14.4-r4
L GHSA-p93r-85wp-75v3	<8.14.4-r4
L GHSA-c3fc-8qff-9hwx	<8.14.4-r4
L CVE-2026-3505	<8.14.4-r4
L CVE-2026-5598	<8.14.4-r4
L GHSA-6fmv-xxpf-w3cw	<8.14.4-r3
H CVE-2025-67030	<8.14.4-r3
L CVE-2020-36843	<8.14.5-r3
L GHSA-p53j-g8pw-4w5f	<8.14.5-r3
L GHSA-j288-q9x7-2f5v	<8.14.3-r5
L Uncontrolled Recursion	<8.14.3-r5
L GHSA-72hv-8253-57qq	<8.14.4-r1
H Download of Code Without Integrity Check	<8.14.4-r0
H Download of Code Without Integrity Check	<8.14.4-r0
M XML External Entity (XXE) Injection	<8.14.1-r1
L CVE-2024-34447	<8.7.0-r4
L CVE-2024-30171	<8.7.0-r4
L CVE-2024-30172	<8.7.0-r4
L CVE-2024-29857	<8.7.0-r4
M Resource Exhaustion	<8.7.0-r1
M Allocation of Resources Without Limits or Throttling	<8.7.0-r1
M Improper Certificate Validation	<8.7.0-r1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<8.7.0-r1
H XML External Entity (XXE) Injection	<8.4.0-r0
H Files or Directories Accessible to External Parties	<8.2.1-r1
L Incorrect Permission Assignment for Critical Resource	<8.2.1-r1