Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

spockframework/spock

              master @ db681f8
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Man-in-the-Middle: 1 prior fix. Scrutinize any change in this area.

gradle/wrapper/gradle-wrapper.properties: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Man-in-the-Middle: The Gradle wrapper configuration originally lacked checksum verification, permitting an attacker capable of intercepting the connection to serve a tampered or malicious Gradle distribution during build execution. This was mitigated by introducing explicit distributionSha256Sum validation.

File Inclusion: A separate file inclusion vulnerability (CVE-2025-58949) in Spock-related web assets (up to version 1.17) allows remote attackers to execute arbitrary local files via compromised include/require statement parameters, underscoring the risk of dynamic path construction.