Skip to content
OpenAdvisories

Package · Alpine

gradle

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.6

    Gradle usage of long IDs for PGP keys opens potential for collision attacks

    Gradle is a build tool with a focus on build automation and support for multi-language development. This is a collision attack on long IDs (64bits) for PGP keys. Users of dependency verification in Gradle are vulnerable if they use long IDs for PGP keys in a …