Filtered by vendor Gradle Subscriptions
Filtered by product Gradle Subscriptions
Total 21 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-11065 2 Fedoraproject, Gradle 2 Fedora, Gradle 2024-11-21 5.9 Medium
Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site.