CVE-2021-21429

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to...

cd.connect.openapi:connect-openapi-jersey2 (>=5.1, <=5.4), io.solvice:onroute-client (>=0.1.4, <=0.1.8) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.3.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - cd.connect.openapi:connect-openapi-jersey2 =5.1, =0.1.4, =0.1.8...

io.github.ally-financial:watchmen (1.0.0-release) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.3.1)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - io.github.ally-financial:watchmen 1.0.0-release Source cves:...

de.jsyn:unifi-api (1.0.0) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.2.3)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - de.jsyn:unifi-api 1.0.0 Source cves: CVE-2021-21429 Source...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +3 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (5.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - app.keyconnect.api:keyconnect-api 1.0.0 -...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +3 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (5.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - app.keyconnect.api:keyconnect-api 1.0.0 -...

io.agrest.openapi:agrest-openapi-designfirst (>=3.0, <=4.6) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (3.0.2)

org.openapitools:openapi-generator-maven-plugin MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - io.agrest.openapi:agrest-openapi-designfirst =3.0, =4.6 Source...

CVE-2021-21429

OpenAPI Generator (Maven plugin) was vulnerable due to using File.createTempFile in the JDK, which could cause insecure temporary files and potential disclosure of the OpenAPI spec contents to other local users. The affected artifact is the OpenAPI Generator Maven plugin; root cause is insecure h...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +7 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (>=3.0.2, <=5.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version =3.0.2, =4.1, =4.1, =1.1, =1.0.0, =3.0, =0.1.4, =0.1.8 Source cves: CVE-2021-21429 Source advisory: MEND:CVE-2021-21429...