GHSA-27j5-2h6r-c9q2

OpenAPI Tools OpenAPI Generator uses HTTP in various files

Source: GitHub Advisory Database (reviewed) High CVE-2019-11405

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.openapitools:openapi-generator	< 4.0.0-20190419.052012-560	4.0.0-20190419.052012-560

Details

As written in the advisory (Markdown source, shown as plain text).

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2019-11405 advisory
https://github.com/OpenAPITools/openapi-generator/issues/2253 web
https://github.com/OpenAPITools/openapi-generator/pull/2248 web
https://github.com/OpenAPITools/openapi-generator/pull/2697 web
https://github.com/OpenAPITools/openapi-generator package