gradle-8

Direct Vulnerabilities

Known vulnerabilities in the gradle-8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L GHSA-mhm7-754m-9p8w	<8.14.6-r0
L CVE-2026-19032	<8.14.6-r0
L Incorrect Authorization	<8.14.6-r0
L CVE-2026-83557	<8.14.6-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<8.14.6-r0
H Allocation of Resources Without Limits or Throttling	<8.14.6-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<8.14.6-r0
C CVE-2026-8763	<8.14.6-r0
L Server-Side Request Forgery (SSRF)	<8.14.6-r0
L CVE-2026-89425	<8.14.6-r0
L Server-Side Request Forgery (SSRF)	<8.14.6-r0
L CVE-2026-68497	<8.14.6-r0
L CVE-2026-89407	<8.14.6-r0
L CVE-2026-91776	<8.14.6-r0
L CVE-2026-91777	<8.14.6-r0
H CVE-2026-13506	<8.14.6-r0
L Cross-site Scripting (XSS)	<8.14.6-r0
L CVE-2026-68494	<8.14.6-r0
L Incomplete Blacklist	<8.14.6-r0
L Incomplete Blacklist	<8.14.6-r0
L CVE-2025-14813	<8.14.5-r0
H CVE-2025-67030	<8.14.6-r0
L CVE-2026-0636	<8.14.5-r0
L CVE-2026-3505	<8.14.5-r0
L CVE-2026-5598	<8.14.5-r0
L GHSA-72hv-8253-57qq	<8.14.5-r0
H Download of Code Without Integrity Check	<8.14.4-r0
H Download of Code Without Integrity Check	<8.14.4-r0
L Creation of Temporary File With Insecure Permissions	<8.11.1-r0
L Uncontrolled Recursion	*
L CVE-2020-36843	<8.14.6-r0
M XML External Entity (XXE) Injection	<8.14.6-r0