PatchTheCVEgradle vulnerabilities and fixes
Recent CVEs affecting gradle, with upgrade or downgrade steps. 2 tracked.
gradle has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-16. Highest priority: CVE-2026-22816 (score 33/100).
- CVE-2026-22865 HIGH 7.4 UPGRADE Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs
- CVE-2026-22816 HIGH 7.4 UPGRADE Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs
FAQ
How do I fix gradle vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gradle being exploited right now?
None of the tracked gradle CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gradle CVE should I patch first?
CVE-2026-22816 currently ranks highest (33/100): Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs.