CVE-2021-41588: Gradle

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have the encryption and signing keys.

Affected products

• Gradle Gradle: from 2017.2, before 2021.1.3 (fixed in 2021.1.3)

Published 2021-09-24. Last modified 2026-06-17.