gradle-7

Direct Vulnerabilities

Known vulnerabilities in the gradle-7 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H CVE-2026-13506	*
C CVE-2026-8763	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L GHSA-r7wm-3cxj-wff9	*
L Cross-site Scripting (XSS)	*
L CVE-2025-14813	*
L Incomplete Blacklist	*
L Incomplete Blacklist	*
L Server-Side Request Forgery (SSRF)	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L CVE-2026-5598	*
L CVE-2026-0636	*
L CVE-2026-3505	*
L CVE-2024-34447	<7.6.5-r0
L CVE-2026-5588	<7.6.5-r0
H CVE-2025-67030	*
L GHSA-72hv-8253-57qq	*
H Download of Code Without Integrity Check	*
H Download of Code Without Integrity Check	*
H Link Following	<7.6.5-r0
M XML External Entity (XXE) Injection	*
M Allocation of Resources Without Limits or Throttling	<7.6.5-r0
H XML External Entity (XXE) Injection	<7.6.4-r0
M Resource Exhaustion	<7.6.5-r0
L CVE-2024-29857	<7.6.5-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<7.6.5-r0
H Allocation of Resources Without Limits or Throttling	<7.6.5-r0
L Uncontrolled Recursion	*
L CVE-2025-8916	<7.6.5-r0
L Resource Exhaustion	<7.6.5-r0
L CVE-2024-30171	<7.6.5-r0
L CVE-2020-36843	*
M Improper Certificate Validation	<7.6.5-r0