Lucene search
K

865 matches found

EUVD
EUVD
added 2026/01/29 9:47 p.m.3 views

EUVD-2026-4943

gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3.0 that allows arbitrary code execution when a user triggers Bash tab completion in a project containing a malicious Gradle build file. Th...

8.3CVSS6.2AI score0.00033EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/29 9:47 p.m.4 views

CVE-2026-25063

gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3.0 that allows arbitrary code execution when a user triggers Bash tab completion in a project containing a malicious Gradle build file. Th...

8.3CVSS6.2AI score0.00033EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2026/01/29 12:0 a.m.3 views

gradle-completion security vulnerability

Gradle-completion is a autocompletion tool developed by Gradle as open source. Versions of Gradle-completion 9.3.0 and earlier have security vulnerabilities. These vulnerabilities stem from insufficient cleanup of Gradle task names and descriptions, which may lead to command injection and arbitra...

8.3CVSS6.1AI score0.00033EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.4 views

PT-2026-5364

Name of the Vulnerable Software and Affected Versions gradle-completion versions prior to 9.3.1 Description gradle-completion offers Bash and Zsh completion support for Gradle. A command injection issue exists in versions up to and including 9.3.0, potentially leading to arbitrary code execution...

8.3CVSS6.2AI score0.00033EPSS
Exploits0References16
Wolfi
Wolfi
added 2026/01/28 1:48 a.m.5 views

CVE-2026-22816 vulnerabilities

Vulnerabilities for packages: gradle...

8.6CVSS5.9AI score0.0003EPSS
Exploits0
Wolfi
Wolfi
added 2026/01/28 1:48 a.m.5 views

CVE-2026-22865 vulnerabilities

Vulnerabilities for packages: gradle...

8.6CVSS5.9AI score0.0003EPSS
Exploits0
Chainguard
Chainguard
added 2026/01/28 1:17 a.m.7 views

CVE-2026-22865 vulnerabilities

Vulnerabilities for packages: gradle...

8.6CVSS5.9AI score0.0003EPSS
Exploits0
Chainguard
Chainguard
added 2026/01/28 1:17 a.m.6 views

CVE-2026-22816 vulnerabilities

Vulnerabilities for packages: gradle...

8.6CVSS5.9AI score0.0003EPSS
Exploits0
OSV
OSV
added 2026/01/21 8:41 a.m.4 views

BIT-GRADLE-2026-22865 Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.0003EPSS
Exploits0References2
OSV
OSV
added 2026/01/21 8:41 a.m.3 views

BIT-GRADLE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.6AI score0.0003EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/01/20 12:25 a.m.2 views

SUSE CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.6AI score0.0003EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/01/20 12:25 a.m.2 views

SUSE CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.0003EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/17 11:26 p.m.2 views

CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS6.8AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/17 11:26 p.m.3 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS6.8AI score0.0003EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/17 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-22816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, so...

8.6CVSS5.8AI score0.0003EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/17 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-22865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, so...

8.6CVSS5.8AI score0.0003EPSS
Exploits0References3
NVD
NVD
added 2026/01/16 11:15 p.m.3 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS0.0003EPSS
Exploits0References2
OSV
OSV
added 2026/01/16 11:15 p.m.2 views

DEBIAN-CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

7.4CVSS5.4AI score0.0003EPSS
Exploits0References1
OSV
OSV
added 2026/01/16 11:15 p.m.2 views

DEBIAN-CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

7.4CVSS5.4AI score0.0003EPSS
Exploits0References1
NVD
NVD
added 2026/01/16 11:15 p.m.2 views

CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS0.0003EPSS
Exploits0References1
Rows per page
Query Builder