Lucene search
+L

10057 matches found

osv-ubuntu
osv-ubuntu
•added 2026/01/16 11:15 p.m.•17 views

UBUNTU-CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/01/16 10:46 p.m.•44 views

CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/01/16 10:46 p.m.•14 views

CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/16 10:46 p.m.•11 views

CVE-2026-22865 Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/16 10:46 p.m.•19 views

CVE-2026-22865 Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS6.7AI score
SaveExploits0References3
CVE
CVE
•added 2026/01/16 10:46 p.m.•88 views

CVE-2026-22865

CVE-2026-22865 affects Gradle (Gradle native-platform tool) for versions before 9.3.0. During dependency resolution, certain exceptions (e.g., NoHttpResponseException) were not treated as fatal, causing Gradle to continue to the next repository and potentially fetch from a malicious one. The issu...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2026/01/16 10:46 p.m.•28 views

CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/16 10:45 p.m.•32 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0
OSV
OSV
•added 2026/01/16 10:45 p.m.•20 views

CVE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/16 10:45 p.m.•14 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
•added 2026/01/16 10:45 p.m.•26 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/01/16 10:45 p.m.•44 views

CVE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS0.00173EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/16 10:45 p.m.•8 views

CVE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/16 10:45 p.m.•69 views

CVE-2026-22816

CVE-2026-22816 (Gradle) : Multiple sources describe a vulnerability in Gradle before 9.3.0 where non-fatal exceptions during dependency resolution would allow Gradle to continue to the next repository, and an unresolvable host name could let an attacker register a service under the build’s host n...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2026/01/16 10:45 p.m.•4 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/16 12:00 a.m.•25 views

Gradle security vulnerabilities

Gradle is a project build tool based on the JVM, developed by the American company Gradle Inc. It supports Maven and Ivy repositories. Prior to Gradle 9.3.0, there were security vulnerabilities. These vulnerabilities stemmed from the fact that certain exceptions were not treated as fatal errors...

8.6CVSS5.9AI score0.00173EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•7 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001472 advisory. In hidinputchangeresolutionmultipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of...

7.8CVSS7AI score0.00282EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/16 12:00 a.m.•24 views

Gradle security vulnerabilities

Gradle is a project build tool based on the JVM, developed by the American company Gradle Inc. It supports Maven, Ivy repositories, etc. Versions of Gradle prior to 9.3.0 contained security vulnerabilities. These vulnerabilities stemmed from the fact that certain exceptions were not treated as...

8.6CVSS5.9AI score0.00158EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•5 views

CVE-2026-22816: Inclusion of Functionality from Untrusted Control Sphere

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•6 views

CVE-2026-22865: Download of Code Without Integrity Check

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0References1
Rows per page
Query Builder