GHSA-P2F7-9CV7-JJF6 Goomph before 3.37.2 allows malicious zip file to write contents to arbitrary locations

This affects the package com.diffplug.gradle:goomph before 3.37.2. It allows a malicious zip file to potentially break out of the expected destination directory, writing contents into arbitrary locations on the file system. Overwriting certain files/directories could allow an attacker to achieve...

org.jetbrains.kotlin:kdoc (0.7.191), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.191) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.191)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.191 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.191 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.191 -...

org.jetbrains.kotlin:kdoc (0.7.802), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.802) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.802)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.802 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.802 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.802 -...

org.jetbrains.kotlin:kdoc (0.7.895), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.895) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.895)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.895 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.895 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.895 -...

org.jetbrains.kotlin:kdoc (0.7.1217), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.1217) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.1217)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.1217 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.1217 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.1217 -...

org.jetbrains.kotlin.konan:org.jetbrains.kotlin.konan.gradle.plugin (>=0.9.1-rc1-3915, <=1.3.0-rc-208), org.jetbrains.kotlin.native:org.jetbrains.kotlin.native.gradle.plugin (>=0.9.1-rc1-3915, <=1.3.0-rc-208) +10 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.9.1-native)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.9.1-native is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin.konan:org.jetbrains.kotlin.konan.gradle.plugin =0.9.1-rc1-3915,...

org.jetbrains.kotlin:kdoc (0.7.852), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.852) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.852)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.852 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.852 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.852 -...

org.jetbrains.kotlin:kdoc (0.7.1090), org.jetbrains.kotlin:kdoc-maven-plugin (0.7.1090) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.7.1090)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.1090 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.7.1090 - org.jetbrains.kotlin:kdoc-maven-plugin 0.7.1090 -...

org.jetbrains.kotlin:kdoc (0.8.484), org.jetbrains.kotlin:kdoc-maven-plugin (0.8.484) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.8.484)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.8.484 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.8.484 - org.jetbrains.kotlin:kdoc-maven-plugin 0.8.484 -...

org.jetbrains.kotlin:kdoc (0.8.1527), org.jetbrains.kotlin:kdoc-maven-plugin (0.8.1527) +4 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.8.1527)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.8.1527 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.8.1527 - org.jetbrains.kotlin:kdoc-maven-plugin 0.8.1527 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.1), org.openapitools:openapi-generator-gradle-plugin-mvn-wrapper (3.0.1) +2 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.1)

org.openapitools:openapi-generator MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.1 -...

io.agrest.openapi:agrest-openapi-designfirst (>=3.0, <=4.6), org.openapitools:openapi-generator-gradle-plugin (3.0.2) +3 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.2)

org.openapitools:openapi-generator MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - io.agrest.openapi:agrest-openapi-designfirst =3.0, =4.6 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.3), org.openapitools:openapi-generator-maven-plugin (3.0.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.3)

org.openapitools:openapi-generator MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.2), org.openapitools:openapi-generator-maven-plugin (3.1.2) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.2)

org.openapitools:openapi-generator MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.0), org.openapitools:openapi-generator-maven-plugin (3.2.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.0)

org.openapitools:openapi-generator MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.1), org.openapitools:openapi-generator-maven-plugin (3.3.1) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.1)

org.openapitools:openapi-generator MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.1), org.openapitools:openapi-generator-maven-plugin (3.2.1) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.1)

org.openapitools:openapi-generator MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.2), org.openapitools:openapi-generator-maven-plugin (3.2.2) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.2)

org.openapitools:openapi-generator MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.3), org.openapitools:openapi-generator-maven-plugin (3.2.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.3)

org.openapitools:openapi-generator MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.0), org.openapitools:openapi-generator-maven-plugin (3.3.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.0)

org.openapitools:openapi-generator MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.0 -...