https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T18:38:35.296992+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-03755 cnvd-2018-03755 2026-10-16T18:38:35.349877+00:00 cnvd-2018-03755 https://cve.radiocsirt.org/vuln/euvd-2026-170794 EUVD-2026-170794 2026-10-16T18:38:35.349917+00:00 EUVD-2026-170794 https://cve.radiocsirt.org/vuln/fkie_cve-2017-3160 fkie_cve-2017-3160 2026-10-16T18:38:35.349932+00:00

After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity of this issue is high due to the fact that the build scripts immediately start a build after Gradle has been fetched. Developers who are concerned about this issue should install version 6.1.2 or higher of Cordova-Android. If developers are unable to install the latest version, this vulnerability can easily be mitigated by setting the CORDOVA_ANDROID_GRADLE_DISTRIBUTION_URL environment variable to https://services.gradle.org/distributions/gradle-2.14.1-all.zip

 https://cve.radiocsirt.org/vuln/ghsa-vjv5-2xqq-c8vh GHSA-vjv5-2xqq-c8vh 2026-10-16T18:38:35.349966+00:00

After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity of this issue is high due to the fact that the build scripts immediately start a build after Gradle has been fetched. Developers who are concerned about this issue should install version 6.1.2 or higher of Cordova-Android. If developers are unable to install the latest version, this vulnerability can easily be mitigated by setting the CORDOVA_ANDROID_GRADLE_DISTRIBUTION_URL environment variable to https://services.gradle.org/distributions/gradle-2.14.1-all.zip

 https://cve.radiocsirt.org/vuln/gsd-2017-3160 gsd-2017-3160 2026-10-16T18:38:35.349986+00:00 gsd-2017-3160