CVE-2026-22816
- Source
- https://cve.org/CVERecord?id=CVE-2026-22816
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-22816.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-22816
- Aliases
-
- BIT-gradle-2026-22816
- GHSA-w78c-w6vf-rw82
- Downstream
- Related
- Published
- 2026-01-16T22:45:48.937Z
- Modified
- 2026-08-12T15:31:41.562316Z
- Severity
-
- 8.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:H/SA:N CVSS Calculator
- Summary
- Gradle fails to disable repositories which can expose builds to malicious artifacts
- Details
-
Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these exceptions, Gradle would continue to the next repository in the list and potentially resolve dependencies from a different repository. If a Gradle build used an unresolvable host name, Gradle would continue to work as long as all dependencies could be resolved from another repository. An unresolvable host name could be caused by allowing a repository's domain name registration to lapse or typo-ing the real domain name. This behavior could allow an attacker to register a service under the host name used by the build and serve malicious artifacts. The attack requires the repository to be listed before others in the build configuration. Gradle has introduced a change in behavior in Gradle 9.3.0 to stop searching other repositories when encountering these errors.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-494", "CWE-829" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22816.json" }- References
Affected packages
Git / github.com/gradle/gradle
Affected ranges
- Type
- GIT
- Repo
- https://github.com/gradle/gradle
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "0" }, { "fixed": "8.14.4" }, { "introduced": "9.0.0" }, { "fixed": "9.3.0" } ], "source": [ "CPE_RANGE", "REFERENCES" ], "cpe": "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*" }
Affected versions
REL-0.*
REL-0.8
REL-0.9-preview-1
REL-0.9-preview-2
REL-0.9-preview-3
REL-0.9-rc-1
REL_0.*
REL_0.9
REL_0.9-rc-2
REL_0.9-rc-3
REL_0.9.1
REL_0.9.2
REL_1.*
REL_1.0-milestone-1
REL_1.0-milestone-2
REL_1.0-milestone-3
REL_1.11
REL_1.11-rc-1
REL_1.12
REL_1.12-rc-1
REL_1.12-rc-2
REL_3.*
REL_3.0-milestone-1
v0.*
v0.8
v0.8.0
v0.9
v0.9-RC1
v0.9-RC2
v0.9-RC3
v0.9.0
v0.9.0-RC1
v0.9.0-RC2
v0.9.0-RC3
v0.9.1
v0.9.2
v1.*
v1.0-M1
v1.0-M2
v1.0-M3
v1.0.0-M1
v1.0.0-M2
v1.0.0-M3
v1.11
v1.11-RC1
v1.11.0
v1.11.0-RC1
v1.12
v1.12-RC1
v1.12-RC2
v1.12.0
v1.12.0-RC1
v1.12.0-RC2
v3.*
v3.0.0-M1
v6.*
v6.1.0-M1
v6.1.0-M2
v6.5.0-M1
v6.5.0-M2
v6.6.0-M1
v6.6.0-M2
v6.8.0-M1
v6.8.0-M2
v6.8.0-M3
v7.*
v7.0.0-M1
v7.0.0-M2
v7.0.0-M3
v8.*
v8.0.0-M2
v8.10.0
v8.10.0-RC1
v8.10.1
v8.10.2
v8.10.2-M1
v8.11.0
v8.11.0-M1
v8.11.0-RC1
v8.11.0-RC2
v8.11.0-RC3
v8.11.1
v8.12.0
v8.12.0-RC1
v8.12.0-RC2
v8.12.1
v8.12.1-M1
v8.13.0
v8.13.0-RC1
v8.13.0-RC2
v8.14.0
v8.14.0-M5
v8.14.0-M6
v8.14.0-M7
v8.14.0-M8
v8.14.0-RC1
v8.14.0-RC2
v8.14.0-RC3
v8.14.1
v8.14.2
v8.14.3
v8.3.0
v8.3.0-RC1
v8.3.0-RC2
v8.3.0-RC3
v8.3.0-RC4
v8.4.0
v8.4.0-RC1
v8.4.0-RC2
v8.4.0-RC3
v8.5.0
v8.5.0-RC1
v8.5.0-RC2
v8.5.0-RC3
v8.5.0-RC4
v8.6.0
v8.6.0-RC1
v8.6.0-RC2
v8.6.0-RC3
v8.6.0-RC4
v8.7.0
v8.7.0-RC1
v8.7.0-RC2
v8.7.0-RC3
v8.7.0-RC4
v8.8.0
v8.8.0-RC1
v8.8.0-RC2
v8.9.0
v8.9.0-RC1
v8.9.0-RC2
v9.*
v9.0.0
v9.1.0
v9.1.0-RC1
v9.1.0-RC2
v9.1.0-RC3
v9.1.0-RC4
v9.2.0
v9.2.0-RC1
v9.2.0-RC2
v9.2.0-RC3
v9.2.1
v9.3.0-M2
v9.3.0-RC1
v9.3.0-RC2
v9.3.0-RC3
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-22816.json"
vanir_signatures
[
{
"target": {
"function": "tryDisableRepository",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/RepositoryDisabler.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-0787ab28",
"signature_version": "v1",
"digest": {
"length": 63.0,
"function_hash": "240167244373236895108009729949000636257"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/BaseModuleComponentRepository.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-0e84a55f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"164001225666946117598523546576595866269",
"99857558428137331426477122120703492204"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "resolveModule",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/RepositoryChainComponentMetaDataResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-0f49e60f",
"signature_version": "v1",
"digest": {
"length": 1073.0,
"function_hash": "337656270511070399042612899497075115956"
},
"signature_type": "Function"
},
{
"target": {
"function": "resolve",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/DynamicVersionResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-0fac5055",
"signature_version": "v1",
"digest": {
"length": 1040.0,
"function_hash": "210927715877159085764580823931339358374"
},
"signature_type": "Function"
},
{
"target": {
"function": "tryResolveAndMaybeDisable",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/ErrorHandlingModuleComponentRepository.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-141a19b6",
"signature_version": "v1",
"digest": {
"length": 1030.0,
"function_hash": "21242223352973093947745417762444158705"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/CachingModuleComponentRepository.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-2f3c8c3e",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"310540359759546806103529175520837432720",
"23575807641865286565735260111391850818",
"105033184484523555002817531248437410083"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "findLatestModule",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/DynamicVersionResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-3d16b732",
"signature_version": "v1",
"digest": {
"length": 339.0,
"function_hash": "55033289779370266288802212087982399976"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/ModuleComponentRepository.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-487d8f85",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"283895631351670402262651385183985304589"
]
},
"signature_type": "Line"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/DependencyVerifyingModuleComponentRepository.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-4ddd30dc",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"333405246678258396801062444351416084559",
"259739529087526977815079300120147172097",
"94108019369129919678726505814144918630"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "getFailure",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/RepositoryChainComponentMetaDataResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-51b51762",
"signature_version": "v1",
"digest": {
"length": 39.0,
"function_hash": "147978839821474423543899494991849432019"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/ErrorHandlingModuleComponentRepository.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-6106bcd1",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"262137515382334248535708865677189707622",
"238288269112294725688547994735187053835",
"147873035796705100467045042098692329264",
"120444279247109617190011809540572900234",
"58102347162275309937333155695161090351",
"216328347590350388788749801056391321760",
"256814829201318676545582271952651805749",
"239469847544609949402571020680557148551",
"64169900281457828316755637504073723652",
"314296604765550248723965578173663415677",
"118642812274109925832377678569262988013",
"78088197743003639163391258915114719435",
"295045495405000247860942186369623750612",
"202124652806417897655654652148735205495",
"179719480188286839809703340333044618354",
"204686908251312863069410441889275817852",
"117220642280390678272111166111194533942",
"229182792614223599868636128585341328757",
"42189277405275503208375227651714523539"
]
},
"signature_type": "Line"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/RepositoryChainComponentMetaDataResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-7a3b3309",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"57776450078213908760435063997686563002",
"318461834455993146664435200682563860584",
"221864682659702196689635424776847367968",
"169283166373119199549002676644402892620",
"52784590954014822783685257591556066802",
"141442389036158861813695053966954364229",
"227873072894216075611745476647325119965",
"121537015166057309567280026868992985938",
"191286854325242765088625316628101036786",
"262691473348413241765975750490237581887",
"245775121841155495736856197428520318428",
"1714678903669154663552800914072574366",
"44145189246802119799127693419319601224",
"7840141737568866842666016331196619981",
"156292880912919570670324538187851339463",
"165499604077711550622907511977201941995",
"236709290407815981708025181939412955226",
"280217717645616173821818155001510654053",
"88265137400763571244902869756636439824",
"277205154416049146351984022402877376704",
"54430353746185852103946502365454523352",
"160335481439455686225706202997047386327",
"298996678274522872002763161706982559086",
"47021932468386284224588238848432739718",
"186779640593961836583548744614472061057",
"247103690703661836352004037545142366501",
"314974667951588861012262083480341270295",
"330013604895401582157157966537083448126",
"141287980846014005351673514930623749264",
"25835386343624841327837502397183569815",
"244020525688933989844422740602099420624",
"250901248968289484950394390606890991797",
"9225680769876924948539579849314385547",
"315753689356261331425087532485030503776",
"130382390917259786049899345986336661196",
"71537087060870950914752399835783337415",
"263020860339638855423390654967376107181",
"181067664156244944224594556886708240913",
"333737621244041532406317590884166565765",
"135791319851718188461911457025383445363",
"109985322271419419008447083321220110686",
"300646441409039780299498040341510026537",
"77151626960624404244183661465527830927",
"127595099268555640529433221145046904904",
"28439563369672362751459174501737343472",
"232207841170052697730478077156231238873",
"236497804313685476547275516510306077467",
"267018714965709409681106847560662267849",
"100614497788251119561088107165397452347",
"293465223422343258976466417904067774874",
"294119585315344735616683811695953134308",
"312542708036395452589346727005254146298",
"94865287255096956357950544607569760624",
"223871018763808325983822512483409792668",
"218210768991480217931900408747910657238",
"151159722730122918713075136066426509581",
"159442843009735168090304424447236396603",
"321279512931314829112866774765434725948",
"155291201872846524033188969538805791046"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "tryDisableRepository",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/ConnectionFailureRepositoryDisabler.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-7c310f25",
"signature_version": "v1",
"digest": {
"length": 329.0,
"function_hash": "163392029913938541970272067095514589998"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/repositories/resolver/ExternalResourceResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-7e7a0e31",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18927064312138142592200669913867310711",
"180586373113782168733588574564888076023",
"7315995542673117105520085787849571791"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "findLatestModule",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/DynamicVersionResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-7fc00e76",
"signature_version": "v1",
"digest": {
"length": 908.0,
"function_hash": "224466072690271759877025144131244286604"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/ComponentMetaDataResolveState.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-940ae6fa",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"175093927857177111765890245956578720179",
"55468855438800847574238918002143754643"
]
},
"signature_type": "Line"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/FilteredModuleComponentRepository.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-a851a1c4",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"287934898551526242526876770621154580419",
"103533146640546410823617848475223408673",
"339507579659640426363310805936547870669"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "hasCriticalFailure",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/internal/resolve/ResolveExceptionAnalyzer.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-a9c0f548",
"signature_version": "v1",
"digest": {
"length": 129.0,
"function_hash": "274395979913021427311429577575026661582"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/ConnectionFailureRepositoryDisabler.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-bb60392e",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"41707313193929705201239829332384832295",
"55654573250944881776828903541930951407",
"192926906751194627771802230435939827224",
"177403902103366435339831454428862660049",
"103763549328855779762221736873678446041",
"112043738581366689110267826488173209822",
"71899489882538544471307556909896574681",
"277938223805588835167410392556180603024",
"237604566480271675062126943141520032437"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "containsCriticalFailures",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/RepositoryChainComponentMetaDataResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-c9ddac45",
"signature_version": "v1",
"digest": {
"length": 214.0,
"function_hash": "218018840366035776990413848505080092422"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/RepositoryDisabler.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-cfa48093",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"8654006955960761421723238543228251379",
"45507135999452312535797051493905299069",
"50987720449498555767890592848794989750",
"223837832783741904399599127622085707903",
"239939807333841325119317024110610702922",
"318003524742107772731863131876691917409",
"166272552346543369227395084777858883814",
"258030666902897818650677550683315234405"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "findBestMatch",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/RepositoryChainComponentMetaDataResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-da66190a",
"signature_version": "v1",
"digest": {
"length": 824.0,
"function_hash": "288375928762387477165372209355188814705"
},
"signature_type": "Function"
},
{
"target": {
"function": "ErrorHandlingModuleComponentRepository",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/ErrorHandlingModuleComponentRepository.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-e436e14e",
"signature_version": "v1",
"digest": {
"length": 287.0,
"function_hash": "276670286462165497953503080071653898857"
},
"signature_type": "Function"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/internal/resolve/ResolveExceptionAnalyzer.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-ee7bfd24",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"278038971989434210852916920876961671354",
"183252777124460775784976700631163580857",
"293843348644792429917007157888518581981",
"51393754077601495069182211514225656716",
"65406269245135044081778959402874020127",
"60339003310000637334811976116594211105",
"47065087394081831567320089133085799730",
"5313548433834009423608263827450331140",
"102773042227712380051185624212894701760",
"193945555105656936453847297800470789796",
"209879754524056922830866794839068752377",
"17945999650757447346273405869137625026",
"11839370728923650285103287842293528228"
]
},
"signature_type": "Line"
},
{
"target": {
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/DynamicVersionResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-f00210d2",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228405938214058903679957588727867424317",
"217328597861630141478563430849371960353",
"217921478671160756624872954152272346733",
"150980979422090002812705973546138656919",
"218012442687858705958035071669280358197",
"316598894001175908347443172703502335500",
"83772437377187431611783324253665687862",
"65392588216047489766672409573739881471",
"4097036818869129891972738409560426722",
"169391302179327048471198369487429360460",
"55133985827848226208739223443732915767",
"187304975811631696625485922483179418679",
"298778943802871790579398756065927609064",
"317764933248287590500736414135528845242",
"187912278309491210243800347811997082929",
"156004695602112119435962156861229118457",
"59594038535583741354209654516125216181",
"190857336748254536810217846549630366392",
"171256758038973121821636047551698543974",
"296840968365200246070591699551964140655",
"220179572574338855934700642432257815088",
"12151472051426549959396788312354872310",
"24891191762269853141905458103076256464",
"184106786264616526223134097234541211480",
"33241150704661556624613844746931976160",
"111606514019204521747936854027692824572",
"249700173309887053252700022065250757742",
"273581603734283551581024834768865915181",
"112607022710331197518224691037638635892",
"5198164240686514960335477620356443923",
"12611754420582533271402876957255565790",
"106003921438536687288335847858117797715",
"98787833466338011358371647026429039813",
"76350650315864212488854966703234668862",
"36711372693603729117936814052843778671",
"186833132854159404182435060174910801739",
"263943444315620883684784294834493579267",
"318618226186912664800149309297194232937",
"98925351726773976010492057483599208214",
"126482413581189961088400698779065700977",
"41431400491734051539216634715865527150",
"310756574745710193475412772544683129205",
"15700025805142825910612985529299216950",
"88181637107368059595919252616908250626",
"256062386628727585782893930544428926607",
"206097667978672131827168638767506852254",
"90402146218619904123766653591087434380",
"76990355528318139503249940524730350001",
"127595099268555640529433221145046904904",
"66323858688305181832780431974309215436",
"231956668390780221241591687036596465074",
"99036047635049074759918546749144411205",
"96682447686976885094871009845954142448",
"83974004316358479931170037982790892334",
"241102247402589666781633950188243808001",
"22486899064914642627568786282046153125",
"132350523010783085368028741743143180726"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "findBestMatch",
"file": "platforms/software/dependency-management/src/main/java/org/gradle/api/internal/artifacts/ivyservice/ivyresolve/RepositoryChainComponentMetaDataResolver.java"
},
"deprecated": false,
"source": "https://github.com/gradle/gradle/commit/e5707d0d8fce3d768c9c489004700d78eab1773a",
"id": "CVE-2026-22816-f7dd1fcf",
"signature_version": "v1",
"digest": {
"length": 339.0,
"function_hash": "55033289779370266288802212087982399976"
},
"signature_type": "Function"
}
]
vanir_signatures_modified
"2026-08-12T15:31:41Z"