Lucene search
+L

10136 matches found

osv_cve
osv_cve
•added 2026/01/16 10:46 p.m.•25 views

CVE-2026-22865 Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS6.7AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/01/16 10:46 p.m.•47 views

CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/01/16 10:46 p.m.•15 views

CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/01/16 10:46 p.m.•89 views

CVE-2026-22865

CVE-2026-22865 affects Gradle (Gradle native-platform tool) for versions before 9.3.0. During dependency resolution, certain exceptions (e.g., NoHttpResponseException) were not treated as fatal, causing Gradle to continue to the next repository and potentially fetch from a malicious one. The issu...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2026/01/16 10:46 p.m.•31 views

CVE-2026-22865

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/01/16 10:45 p.m.•22 views

CVE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/01/16 10:45 p.m.•27 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/16 10:45 p.m.•35 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0
CVE
CVE
•added 2026/01/16 10:45 p.m.•71 views

CVE-2026-22816

CVE-2026-22816 (Gradle) : Multiple sources describe a vulnerability in Gradle before 9.3.0 where non-fatal exceptions during dependency resolution would allow Gradle to continue to the next repository, and an unresolvable host name could let an attacker register a service under the build’s host n...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/01/16 10:45 p.m.•15 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2026/01/16 10:45 p.m.•6 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/16 10:45 p.m.•45 views

CVE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS0.00173EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/16 10:45 p.m.•8 views

CVE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•6 views

CVE-2026-22865: Download of Code Without Integrity Check

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/16 12:00 a.m.•25 views

Gradle security vulnerabilities

Gradle is a project build tool based on the JVM, developed by the American company Gradle Inc. It supports Maven, Ivy repositories, etc. Versions of Gradle prior to 9.3.0 contained security vulnerabilities. These vulnerabilities stemmed from the fact that certain exceptions were not treated as...

8.6CVSS5.9AI score0.00158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•7 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001472 advisory. In hidinputchangeresolutionmultipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of...

7.8CVSS7AI score0.00282EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/16 12:00 a.m.•18 views

PT-2026-3330

Name of the Vulnerable Software and Affected Versions Gradle versions prior to 9.3.0 Description Gradle’s native-platform tool, which provides Java bindings for native APIs, does not treat certain exceptions as fatal errors when resolving dependencies in versions before 9.3.0. This allows Gradle ...

8.6CVSS5.8AI score0.00173EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2026/01/16 12:00 a.m.•26 views

Gradle security vulnerabilities

Gradle is a project build tool based on the JVM, developed by the American company Gradle Inc. It supports Maven and Ivy repositories. Prior to Gradle 9.3.0, there were security vulnerabilities. These vulnerabilities stemmed from the fact that certain exceptions were not treated as fatal errors...

8.6CVSS5.9AI score0.00173EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•6 views

CVE-2026-22816: Inclusion of Functionality from Untrusted Control Sphere

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/14 6:22 p.m.•15 views

CVE-2026-20941

Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00475EPSS
SaveExploits0References1
Rows per page
Query Builder