Gradle 9.9.1 and 8.14.7 fix three Gradle vulnerabilities, including a CVSS 9.3 version catalog code injection that runs during builds and IDE sync.
#Gradle #Java #SupplyChainSecurity #BuildSecurity #RCE #CICD #CyberSecurity #InfoSec
#buildsecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #buildsecurity, aggregated by home.social.