TI-2026-86053 CVE-2026-75598Path traversal in Gradle Shadow plugin lets attackers write filesPriority LOW 27The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and package relocation.CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.0014 · Published 2026-11-06 · Fixed in 9.6.0 CWE-22