Priority LOW 39
gradle-completion provides Bash and Zsh completion support for Gradle.
Vulnerabilities
53 records
TI-2026-18357 CVE-2026-22865
Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts
Priority LOW 36
Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs.
TI-2026-18332 CVE-2026-22816
Gradle fails to disable repositories which can expose builds to malicious artifacts
Priority LOW 36
Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs.
TI-2025-20005 CVE-2025-27148
Gradle vulnerable to local privilege escalation through system temporary directory
Priority MEDIUM 40
Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs.
TI-2025-18567 CVE-2025-24858 · GHSA-5mvq-pxfx-vffx
Develocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has…
Priority LOW 37
Develocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has network access to a Develocity server to obtain the hashed password of the system user.
TI-2024-31298 CVE-2024-46881 · GHSA-cw76-h7wr-rh77
Incorrect permission assignment in gradle Enterprise
Priority LOW 31
Develocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control.
TI-2023-26881 CVE-2023-49238 · GHSA-4766-3xqh-rp5x
In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new…
Priority MEDIUM 50
In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system user password.
Priority LOW 31
Gradle is a build tool with a focus on build automation and support for multi-language development.
TI-2023-23893 CVE-2023-44387
Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations
Priority LOW 28
Gradle is a build tool with a focus on build automation and support for multi-language development.
TI-2023-18007 CVE-2023-35946
Dependency cache path traversal in Gradle
Priority LOW 30
Gradle is a build tool with a focus on build automation and support for multi-language development.
Priority LOW 36
Gradle is a build tool with a focus on build automation and support for multi-language development.
TI-2023-14632 CVE-2023-30853 · GHSA-h3qr-39j9-4r5v
Gradle Build Action data written to GitHub Actions Cache may expose secrets
Priority LOW 33
Gradle Build Action allows users to execute a Gradle Build in their GitHub Actions workflow.
TI-2023-11286 CVE-2023-26053
Gradle usage of long IDs for PGP keys opens potential for collision attacks
Priority MEDIUM 45
Gradle is a build tool with a focus on build automation and support for multi-language development.
TI-2022-19979 CVE-2022-41575 · GHSA-rfq8-cv47-2c2h
A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise…
Priority MEDIUM 41
A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data (e.g., cleartext credentials).
TI-2022-19978 CVE-2022-41574 · GHSA-2h8w-grhw-cqcr
An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows…
Priority LOW 34
An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content to the configured installation-administr…
TI-2022-13199 CVE-2022-31156
Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed
Priority LOW 32
Gradle is a build tool.
TI-2022-12730 CVE-2022-30587 · GHSA-fq3g-28pg-gq26
Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure.
Priority LOW 35
Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information disclosure.
TI-2022-12729 CVE-2022-30586 · GHSA-wf74-667m-qg32
Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution.
Priority LOW 34
Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution.
TI-2022-10790 CVE-2022-27919 · GHSA-rpgf-wx3x-j576
Gradle Enterprise before 2022.1 allows remote code execution if the installation process…
Priority MEDIUM 46
Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file.
TI-2022-09050 CVE-2022-25364 · GHSA-rqrc-wvq6-vxfv
In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration…
Priority LOW 37
In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access.
TI-2022-10346 CVE-2022-27225 · GHSA-fxrc-j9qq-62g8
Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some…
Priority LOW 30
Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations.
TI-2022-07682 CVE-2022-23630
Dependency verification bypass in Gradle
Priority LOW 38
Gradle is a build tool with a focus on build automation and support for multi-language development.
TI-2021-18320 CVE-2021-41589 · GHSA-65w8-859v-42ph
In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there…
Priority MEDIUM 47
In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code execution when running the build cache node with its default configuration.
TI-2021-18340 CVE-2021-41619 · GHSA-8wc9-4crc-jr2q
An issue was discovered in Gradle Enterprise before 2021.1.2.
Priority LOW 37
An issue was discovered in Gradle Enterprise before 2021.1.2.
TI-2021-18321 CVE-2021-41590 · GHSA-43rf-fwx9-64w8
In Gradle Enterprise through 2021.3, probing of the server-side network environment can…
Priority LOW 25
In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration test.