Gradle vulnerabilities

CVEs per yearBy the year they were published

1. 20214
2. 20222
3. 20236
4. 20253
5. 20263

Newest CVEs

• CVE-2026-25063

  gradle-completion has a Bash command injection issue

  gradle · gradle-completion

  High8.3
• CVE-2026-22865

  Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

  gradle · gradle

  High8.6
• CVE-2026-22816

  Gradle fails to disable repositories which can expose builds to malicious artifacts

  gradle · gradle

  High8.6
• CVE-2025-27148

  Gradle vulnerable to local privilege escalation through system temporary directory

  gradle · gradle

  High8.8
• CVE-2025-24858

  Develocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has network access to a Develocity server to obtain the hashed password of the…

  Gradle · Enterprise

  High8.3
• CVE-2024-46881

  Develocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control. Project-level access control configuration was introduced in Enterprise…

  Gradle · Enterprise

  High7.1
• CVE-2023-42445

  Possible local file exfiltration by XML External entity injection

  gradle · gradle

  Medium6.8
• CVE-2023-44387

  Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations

  gradle · gradle

  Low3.2
• CVE-2023-35946

  Dependency cache path traversal in Gradle

  gradle · gradle

  Medium6.9
• CVE-2023-35947

  Path traversal vulnerabilities in handling of Tar archives in Gradle

  gradle · gradle

  Medium6.9