HIGH 7.4 Maven
OpenAPI Tools OpenAPI Generator uses HTTP in various files
GHSA-27j5-2h6r-c9q2 · CVE-2019-11405
Published · Modified
Description
OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-11405
- WEB https://github.com/OpenAPITools/openapi-generator/issues/2253
- WEB https://github.com/OpenAPITools/openapi-generator/pull/2248
- WEB https://github.com/OpenAPITools/openapi-generator/pull/2697
- PACKAGE https://github.com/OpenAPITools/openapi-generator
Ready to move
Start Securing
Free, no credit card | First findings in minutes