gradle gradle vulnerabilities

CVEs per yearBy the year they were published

1. 20214
2. 20222
3. 20235
4. 20251
5. 20262

Newest CVEs

• CVE-2026-22865

  Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

  gradle · gradle

  High8.6
• CVE-2026-22816

  Gradle fails to disable repositories which can expose builds to malicious artifacts

  gradle · gradle

  High8.6
• CVE-2025-27148

  Gradle vulnerable to local privilege escalation through system temporary directory

  gradle · gradle

  High8.8
• CVE-2023-42445

  Possible local file exfiltration by XML External entity injection

  gradle · gradle

  Medium6.8
• CVE-2023-44387

  Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations

  gradle · gradle

  Low3.2
• CVE-2023-35946

  Dependency cache path traversal in Gradle

  gradle · gradle

  Medium6.9
• CVE-2023-35947

  Path traversal vulnerabilities in handling of Tar archives in Gradle

  gradle · gradle

  Medium6.9
• CVE-2023-26053

  Gradle usage of long IDs for PGP keys opens potential for collision attacks

  gradle · gradle

  Medium6.6
• CVE-2022-31156

  Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed

  gradle · gradle

  Medium6.6
• CVE-2022-23630

  Dependency verification bypass in Gradle

  gradle · gradle

  High7.5