<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: gradle</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-25063: gradle-completion provides Bash and Zsh completion support for Gradle</title><link>https://patchthecve.com/cve/CVE-2026-25063.html</link><guid>https://patchthecve.com/cve/CVE-2026-25063.html</guid><pubDate>Wed, 17 Jun 2026 10:24:04 +0000</pubDate><description>HIGH 7.8: gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3.0 that allows arbitrary code execution when a user triggers Bash tab completion in a project containing a malicious Gradle build file. The `</description></item><item><title>CVE-2026-22865: Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs</title><link>https://patchthecve.com/cve/CVE-2026-22865.html</link><guid>https://patchthecve.com/cve/CVE-2026-22865.html</guid><pubDate>Wed, 17 Jun 2026 10:20:31 +0000</pubDate><description>HIGH 7.4: Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these exceptio</description></item><item><title>CVE-2026-22816: Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs</title><link>https://patchthecve.com/cve/CVE-2026-22816.html</link><guid>https://patchthecve.com/cve/CVE-2026-22816.html</guid><pubDate>Wed, 17 Jun 2026 10:20:28 +0000</pubDate><description>HIGH 7.4: Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these exceptio</description></item></channel></rss>