Known vulnerabilities in gradle

Vendor: Gradle
Software: gradle
Software CPE: cpe:2.3:a:Gradle:gradle:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting gradle gradle is affected by 13 known vulnerabilities: 3 high, 4 medium, 6 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121643 - Download of Code Without Integrity Check
CVE-2026-22865
CWE-494 High
No
No
8.14.4, 9.3.0 19.01.2026 SB2026011932
#VU121641 - Download of Code Without Integrity Check
CVE-2026-22816
CWE-494 High
No
No
8.14.4, 9.3.0 19.01.2026 SB2026011932
#VU106023 - Creation of Temporary File With Insecure Permissions
CVE-2025-27148
CWE-378 Low
No
No
8.12.1 25.03.2025 SB2025032549
#VU88229 - Insufficiently Protected Credentials
CVE-2019-15052
CWE-522 Low
No
No
5.6.0 09.04.2024 SB2019081463
SB2024040942
#VU83979 - Incorrect Permission Assignment for Critical Resource
CVE-2023-44387
CWE-732 Low
No
No
7.6.3, 8.4.0 07.12.2023 SB2023120726
SB2023120727
SB2025012201
#VU83978 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-42445
CWE-611 Medium
No
No
7.6.3, 8.4.0 07.12.2023 SB2023120726
SB2023120727
SB2024080107
#VU77930 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-35947
CWE-22 Medium
No
No
7.6.2, 8.2.0 04.07.2023 SB2023070421
SB2024110653
SB2025022618
#VU77929 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-35946
CWE-22 Medium
No
No
7.6.2, 8.2.0 04.07.2023 SB2023070421
SB2024090685
SB2025022618
#VU76159 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-32751
CWE-78 Low
No
No
7.2.0 15.05.2023 SB2021072181
SB2023051549
#VU63478 - Insecure Temporary File
CVE-2021-29429
CWE-377 Low
No
No
7.0.0 20.05.2022 SB2021041388
SB2024040942
#VU63473 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2021-29427
CWE-829 Medium
No
No
7.0.0 20.05.2022 SB2021041388
#VU60583 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23630
CWE-94 Low
No
No
7.4.0 14.02.2022 SB2022021410
#VU39730 - Deserialization of Untrusted Data
CVE-2016-6199
CWE-502 High
No
No
- 07.02.2017 SB2017020705