gradle-8 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the gradle-8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-68494	<8.14.5-r4
L GHSA-642r-3gj9-2pj5	<8.14.5-r4
L CVE-2026-89407	<8.14.5-r10
L GHSA-7hhh-6rmp-j9qf	<8.14.5-r10
L GHSA-p6pp-m3f8-5c89	<8.14.5-r10
L CVE-2026-89425	<8.14.5-r10
L CVE-2026-91776	<8.14.5-r9
L CVE-2026-91777	<8.14.5-r9
L GHSA-cxp5-3px4-pw24	<8.14.5-r9
L GHSA-wv8q-qhhj-9h54	<8.14.5-r9
L GHSA-gx83-3vf8-gh7j	<8.14.5-r8
L CVE-2026-19032	<8.14.5-r8
L GHSA-wjgm-6hv5-3cvf	<8.14.5-r8
L CVE-2026-68497	<8.14.5-r8
L GHSA-q4xh-88c3-wmh7	<8.14.5-r8
L CVE-2026-83557	<8.14.5-r8
L CVE-2026-18401	<8.14.4-r1
L GHSA-6qm2-mcq7-53qp	<8.14.4-r1
L GHSA-pmhh-3w7g-xqp8	<8.14.5-r5
L Cross-site Scripting (XSS)	<8.14.5-r5
L GHSA-r7wm-3cxj-wff9	<8.14.5-r4
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<8.14.5-r3
L GHSA-5jmj-h7xm-6q6v	<8.14.5-r3
L GHSA-mhm7-754m-9p8w	<8.14.5-r2
L Incorrect Authorization	<8.14.5-r2
L GHSA-5gvw-p9qm-jgwh	<8.14.5-r2
L GHSA-rmj7-2vxq-3g9f	<8.14.5-r1
L GHSA-hgj6-7826-r7m5	<8.14.5-r1
L GHSA-j3rv-43j4-c7qm	<8.14.5-r1
L Incomplete Blacklist	<8.14.5-r1
L Server-Side Request Forgery (SSRF)	<8.14.5-r1
L Incomplete Blacklist	<8.14.5-r1
L GHSA-cj8j-37rh-8475	<8.14.4-r4
L CVE-2026-3505	<8.14.4-r4
L GHSA-p93r-85wp-75v3	<8.14.4-r4
L CVE-2026-5598	<8.14.4-r4
L GHSA-c3fc-8qff-9hwx	<8.14.4-r4
L CVE-2026-0636	<8.14.4-r4
L GHSA-6fmv-xxpf-w3cw	<8.14.4-r3
L GHSA-j288-q9x7-2f5v	<8.14.3-r5
L GHSA-p53j-g8pw-4w5f	<8.14.5-r3
L CVE-2020-36843	<8.14.5-r3
H CVE-2025-67030	<8.14.4-r3
L Uncontrolled Recursion	<8.14.3-r5
L GHSA-72hv-8253-57qq	<8.14.4-r1
M XML External Entity (XXE) Injection	<8.14.1-r1
L GHSA-vrpq-qp53-qv56	<8.14.1-r1
H Download of Code Without Integrity Check	<8.14.4-r0
H Download of Code Without Integrity Check	<8.14.4-r0
L CVE-2024-30171	<8.7.0-r4
L CVE-2024-29857	<8.7.0-r4
L CVE-2024-34447	<8.7.0-r4
L CVE-2024-30172	<8.7.0-r4
M Resource Exhaustion	<8.7.0-r1
M Improper Certificate Validation	<8.7.0-r1
M Allocation of Resources Without Limits or Throttling	<8.7.0-r1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<8.7.0-r1
H XML External Entity (XXE) Injection	<8.4.0-r0
H Files or Directories Accessible to External Parties	<8.2.1-r1
L Incorrect Permission Assignment for Critical Resource	<8.2.1-r1

Vulnerability

Vulnerable Version

CVE-2026-68494

<8.14.5-r4