Red Hat JBoss Enterprise Application Platform 6/gradle

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
gradle: Arbitrary code execution via specially crafted environment variablesCVE-2021-32751	Red Hat JBoss Enterprise Application Platform 6/gradle Red Hat Software Collections/rh-maven36-byte-buddy	Red Hat	Medium	No fix reported	Not recorded
gradle: Dependency verification can ignore checksum verification when signature verification cannot be performedCVE-2022-31156	Red Hat JBoss Enterprise Application Platform 6/gradle Red Hat Software Collections/rh-maven36-byte-buddy	Red Hat	Low	No fix reported	Not recorded
gradle: usage of long IDs for PGP keys is unsafe and is subject to collision attacksCVE-2023-26053	Red Hat JBoss Enterprise Application Platform 6/gradle	Red Hat	Medium	No fix reported	Not recorded
gradle: path traversal while handling of tar archivesCVE-2023-35947	Red Hat JBoss Enterprise Application Platform 6/gradle Red Hat Software Collections/rh-maven36-byte-buddy	Red Hat	Medium	No fix reported	Not recorded
gradle: Dependency cache path traversalCVE-2023-35946	Red Hat JBoss Enterprise Application Platform 6/gradle Red Hat Software Collections/rh-maven36-byte-buddy	Red Hat	Medium	No fix reported	Not recorded
gradle: Incorrect permission assignment for symlinked files used in copy or archiving operationsCVE-2023-44387	Red Hat Integration Camel K 1/gradle Red Hat JBoss Enterprise Application Platform 6/gradle	Red Hat	Low	No fix reported	Not recorded
gradle: Possible local text file exfiltration by XML External entity injectionCVE-2023-42445	Red Hat Integration Camel K 1/gradle Red Hat JBoss Enterprise Application Platform 6/gradle	Red Hat	Medium	No fix reported	Not recorded