https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:56:22.744451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-57715 EUVD-2026-57715 2026-10-10T18:56:22.748786+00:00 EUVD-2026-57715 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16370 fkie_cve-2019-16370 2026-10-10T18:56:22.748820+00:00

The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.

 https://cve.radiocsirt.org/vuln/ghsa-hhr2-f668-ff2w GHSA-hhr2-f668-ff2w — Use of a weak cryptographic algorithm in Gradle 2026-10-10T18:56:22.748852+00:00

Affected: Maven: org.gradle:gradle-core

The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.

 https://cve.radiocsirt.org/vuln/gsd-2019-16370 gsd-2019-16370 2026-10-10T18:56:22.748878+00:00 gsd-2019-16370 https://cve.radiocsirt.org/vuln/oesa-2021-1309 OESA-2021-1309 — gradle security update 2026-10-10T18:56:22.748890+00:00

Affected: openEuler:20.03-LTS-SP1: gradle, openEuler:20.03-LTS-SP2: gradle

Gradle is build automation evolved. Gradle can automate the building, testing, publishing, deployment and more of software packages or other types of projects such as generated static websites, generated documentation or indeed anything else. Gradle combines the power and flexibility of Ant with the dependency management and conventions of Maven into a more effective way to build. Powered by a Groovy DSL and packed with innovation, Gradle provides a declarative way to describe all kinds of builds through sensible defaults. Gradle is quickly becoming the build system of choice for many open source projects, leading edge enterprises and legacy automation challenges. Security Fix(es): The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.(CVE-2019-16370)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10817-1 openSUSE-SU-2024:10817-1 — gradle-4.4.1-7.2 on GA media 2026-10-10T18:56:22.748917+00:00

gradle-4.4.1-7.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-16370 UBUNTU-CVE-2019-16370 2026-10-10T18:56:22.748934+00:00

Affected: Ubuntu:16.04:LTS: gradle, Ubuntu:Pro:18.04:LTS: gradle, Ubuntu:20.04:LTS: gradle, Ubuntu:22.04:LTS: gradle, Ubuntu:24.04:LTS: gradle, Ubuntu:25.10: gradle, Ubuntu:26.04:LTS: gradle

The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.