Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

gradle Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-25063`gradle-completion has a Bash command injection issue	Exploitation statusNot known exploited	FixNot confirmed	Affected productgradle-completion	Published01/29/2026	SeverityHigh
`CVE-2026-22865`Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts	Exploitation statusNot known exploited	FixNot confirmed	Affected productgradle	Published01/16/2026	SeverityHigh
`CVE-2026-22816`Gradle fails to disable repositories which can expose builds to malicious artifacts	Exploitation statusNot known exploited	FixNot confirmed	Affected productgradle	Published01/16/2026	SeverityHigh
`CVE-2025-27148`Gradle vulnerable to local privilege escalation through system temporary directory	Exploitation statusNot known exploited	FixYes	Affected productgradle	Published02/25/2025	SeverityHigh
`CVE-2025-24858`	Exploitation statusNot known exploited	FixYes	Affected productEnterprise	Published01/26/2025	SeverityHigh
`CVE-2024-46881`	Exploitation statusNot known exploited	FixYes	Affected productEnterprise	Published01/26/2025	SeverityHigh
`CVE-2023-49238`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published01/09/2024	SeverityCritical
`CVE-2023-42445`Possible local file exfiltration by XML External entity injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productgradle	Published10/06/2023	SeverityMedium
`CVE-2023-44387`Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations	Exploitation statusNot confirmed	FixNot confirmed	Affected productgradle	Published10/05/2023	SeverityLow
`CVE-2023-35946`Dependency cache path traversal in Gradle	Exploitation statusNot confirmed	FixYes	Affected productgradle	Published06/30/2023	SeverityMedium
`CVE-2023-35947`Path traversal vulnerabilities in handling of Tar archives in Gradle	Exploitation statusNot confirmed	FixYes	Affected productgradle	Published06/30/2023	SeverityMedium
`CVE-2023-30853`Gradle Build Action data written to GitHub Actions Cache may expose secrets	Exploitation statusNot known exploited	FixNot confirmed	Affected productgradle-build-action	Published04/28/2023	SeverityHigh
`CVE-2023-26053`Gradle usage of long IDs for PGP keys opens potential for collision attacks	Exploitation statusNot known exploited	FixYes	Affected productgradle	Published03/02/2023	SeverityMedium
`CVE-2022-41575`	Exploitation statusNot known exploited	FixYes	Affected productNot confirmed	Published10/21/2022	SeverityHigh
`CVE-2022-41574`	Exploitation statusNot confirmed	FixYes	Affected productNot confirmed	Published10/07/2022	SeverityUnknown
`CVE-2022-31156`Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed	Exploitation statusNot known exploited	FixNot confirmed	Affected productgradle	Published07/14/2022	SeverityMedium
`CVE-2022-30587`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published06/06/2022	SeverityUnknown
`CVE-2022-30586`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published06/06/2022	SeverityUnknown
`CVE-2022-27919`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/25/2022	SeverityUnknown
`CVE-2022-25364`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/17/2022	SeverityUnknown
`CVE-2022-27225`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/16/2022	SeverityUnknown
`CVE-2022-23630`Dependency verification bypass in Gradle	Exploitation statusNot known exploited	FixNot confirmed	Affected productgradle	Published02/10/2022	SeverityHigh
`CVE-2021-41589`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/27/2021	SeverityUnknown
`CVE-2021-41619`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/27/2021	SeverityUnknown
`CVE-2021-41590`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/27/2021	SeverityUnknown
`CVE-2021-41586`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/24/2021	SeverityUnknown
`CVE-2021-41587`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/24/2021	SeverityUnknown
`CVE-2021-41588`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/24/2021	SeverityUnknown
`CVE-2021-41584`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/24/2021	SeverityUnknown
`CVE-2021-32751`Arbitrary code execution via specially crafted environment variables	Exploitation statusNot confirmed	FixYes	Affected productgradle	Published07/20/2021	SeverityHigh
`CVE-2021-29427`Repository content filters do not work in Settings pluginManagement	Exploitation statusNot confirmed	FixNot confirmed	Affected productgradle	Published04/13/2021	SeverityHigh
`CVE-2021-29428`Local privilege escalation through system temporary directory	Exploitation statusNot confirmed	FixNot confirmed	Affected productgradle	Published04/13/2021	SeverityHigh
`CVE-2021-29429`Information disclosure through temporary directory permissions	Exploitation statusNot confirmed	FixNot confirmed	Affected productgradle	Published04/12/2021	SeverityMedium
`CVE-2021-26719`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published02/09/2021	SeverityUnknown
`CVE-2020-11979`	Exploitation statusNot confirmed	FixNot confirmed	Affected productApache Ant	Published10/01/2020	SeverityUnknown
`CVE-2020-15773`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15767`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15770`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15771`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15772`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15774`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15775`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15776`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15768`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15769`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/18/2020	SeverityUnknown
`CVE-2020-15777`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/25/2020	SeverityUnknown
`CVE-2020-7599`	Exploitation statusNot confirmed	FixNot confirmed	Affected productcom.gradle.plugin-publish	Published03/30/2020	SeverityUnknown
`CVE-2019-16370`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/16/2019	SeverityUnknown
`CVE-2019-15052`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/14/2019	SeverityCritical
`CVE-2019-11403`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/21/2019	SeverityUnknown
`CVE-2019-11402`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/21/2019	SeverityUnknown
`CVE-2019-11065`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/09/2019	SeverityUnknown
`CVE-2016-6199`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published02/07/2017	SeverityUnknown