https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T09:38:08.028949+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-22184 EUVD-2026-22184 2026-10-15T09:38:08.031449+00:00 EUVD-2026-22184 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21361 fkie_cve-2021-21361 2026-10-15T09:38:08.031477+00:00

The `com.bmuschko:gradle-vagrant-plugin` Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors. This is fixed in version 3.0.0.

 https://cve.radiocsirt.org/vuln/ghsa-jpcm-4485-69p7 GHSA-jpcm-4485-69p7 — Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin 2026-10-15T09:38:08.031517+00:00

Affected: Maven: com.bmuschko:gradle-vagrant-plugin

### Impact

The `com.bmuschko:gradle-vagrant-plugin` Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables.

When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors.

### Patches Fixed in version 3.0.0

### References

- https://github.com/bmuschko/gradle-vagrant-plugin/blob/292129f9343d00d391543fae06239e9b0f33db73/src/main/groovy/com/bmuschko/gradle/vagrant/process/GDKExternalProcessExecutor.groovy#L42-L44 - https://github.com/bmuschko/gradle-vagrant-plugin/issues/19 - https://github.com/bmuschko/gradle-vagrant-plugin/pull/20

### For more information

If you have any questions or comments about this advisory: * Open an issue in [bmuschko/gradle-vagrant-plugin](https://github.com/bmuschko/gradle-vagrant-plugin)

 https://cve.radiocsirt.org/vuln/gsd-2021-21361 gsd-2021-21361 2026-10-15T09:38:08.031551+00:00 gsd-2021-21361