<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: gradle</title><description>Every new CVE for gradle.</description><link>https://agentprime.io/</link><item><title>CVE-2026-22865: Gradle&apos;s failure to disable repositories failing to answer can expose builds to malicious artifacts</title><link>https://agentprime.io/advisories/CVE-2026-22865/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-22865/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Jan 2026 22:46:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-22816: Gradle fails to disable repositories which can expose builds to malicious artifacts</title><link>https://agentprime.io/advisories/CVE-2026-22816/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-22816/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Jan 2026 22:45:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-27148: Gradle vulnerable to local privilege escalation through system temporary directory</title><link>https://agentprime.io/advisories/CVE-2025-27148/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-27148/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Feb 2025 20:13:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-42445: Possible local file exfiltration by XML External entity injection</title><link>https://agentprime.io/advisories/CVE-2023-42445/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-42445/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Oct 2023 13:52:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-44387: Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations</title><link>https://agentprime.io/advisories/CVE-2023-44387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-44387/</guid><description>CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Oct 2023 17:51:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-35946: Dependency cache path traversal in Gradle</title><link>https://agentprime.io/advisories/CVE-2023-35946/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-35946/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Jun 2023 20:21:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-35947: Path traversal vulnerabilities in handling of Tar archives in Gradle</title><link>https://agentprime.io/advisories/CVE-2023-35947/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-35947/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Jun 2023 20:18:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-26053: Gradle usage of long IDs for PGP keys opens potential for collision attacks</title><link>https://agentprime.io/advisories/CVE-2023-26053/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-26053/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Mar 2023 03:11:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-31156: Gradle&apos;s dependency verification can ignore checksum verification when signature verification cannot be performed</title><link>https://agentprime.io/advisories/CVE-2022-31156/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-31156/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Jul 2022 20:05:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-23630: Dependency verification bypass in Gradle</title><link>https://agentprime.io/advisories/CVE-2022-23630/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23630/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Feb 2022 20:10:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-32751: Arbitrary code execution via specially crafted environment variables</title><link>https://agentprime.io/advisories/CVE-2021-32751/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-32751/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Jul 2021 22:55:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-29427: Repository content filters do not work in Settings pluginManagement</title><link>https://agentprime.io/advisories/CVE-2021-29427/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-29427/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Apr 2021 17:55:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-29428: Local privilege escalation through system temporary directory</title><link>https://agentprime.io/advisories/CVE-2021-29428/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-29428/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Apr 2021 17:55:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-29429: Information disclosure through temporary directory permissions</title><link>https://agentprime.io/advisories/CVE-2021-29429/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-29429/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Apr 2021 21:30:12 GMT</pubDate><category>CVE</category></item></channel></rss>