https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 05:35:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-38014 EUVD-2026-38014 https://cve.radiocsirt.org/vuln/euvd-2026-38014 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7599 <p>All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is publicly visible (as it is in many popular public CI systems like TravisCI) this AWS pre-signed URL would allow a malicious actor to replace a recently uploaded plugin with their own.</p> <p>All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is publicly visible (as it is in many popular public CI systems like TravisCI) this AWS pre-signed URL would allow a malicious actor to replace a recently uploaded plugin with their own.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7599 https://cve.radiocsirt.org/vuln/ghsa-cv78-v957-jx34 <p><strong>Affected:</strong> Maven: com.gradle.publish:plugin-publish-plugin, Maven: com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin</p> <p>All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is publicly visible (as it is in many popular public CI systems like TravisCI) this AWS pre-signed URL would allow a malicious actor to replace a recently uploaded plugin with their own.</p> <p><strong>Affected:</strong> Maven: com.gradle.publish:plugin-publish-plugin, Maven: com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin</p> <p>All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is publicly visible (as it is in many popular public CI systems like TravisCI) this AWS pre-signed URL would allow a malicious actor to replace a recently uploaded plugin with their own.</p> https://cve.radiocsirt.org/vuln/ghsa-cv78-v957-jx34 https://cve.radiocsirt.org/vuln/gsd-2020-7599 gsd-2020-7599 https://cve.radiocsirt.org/vuln/gsd-2020-7599