| Package | Affected versions | Patched versions |
|---|---|---|
| org.gradle:gradle-core | ≥ 1.4, < 5.4.0 | 5.4.0 |
| gradle | ≥ 1.4, ≤ 5.3.1 |
Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free