org.openapi.generator:org.openapi.generator.gradle.plugin (4.1.3), org.openapitools:openapi-generator-gradle-plugin (4.1.3) +2 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.1.3)

org.openapitools:openapi-generator MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapi.generator:org.openapi.generator.gradle.plugin 4.1.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.1), org.openapitools:openapi-generator-gradle-plugin-mvn-wrapper (3.0.1) +2 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.0.1)

org.openapitools:openapi-generator MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.3), org.openapitools:openapi-generator-maven-plugin (3.2.3) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.3)

org.openapitools:openapi-generator MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.0), org.openapitools:openapi-generator-maven-plugin (3.3.0) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.0)

org.openapitools:openapi-generator MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.0 -...

org.openapitools:openapi-generator-gradle-plugin (4.0.0-beta2), org.openapitools:openapi-generator-maven-plugin (4.0.0-beta2) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.0.0-beta2)

org.openapitools:openapi-generator MAVEN version 4.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 4.0.0-beta2 -...

de.unikassel.vs.apirepo.plugins.api:de.unikassel.vs.apirepo.plugins.api.gradle.plugin (>=0.0.1-stable, <=0.1.0-stable), de.unikassel.vs.apirepo.plugins.client:de.unikassel.vs.apirepo.plugins.client.gradle.plugin (>=0.0.1-stable, <=0.1.0-stable) +11 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.0.3)

org.openapitools:openapi-generator MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - de.unikassel.vs.apirepo.plugins.api:de.unikassel.vs.apirepo.plugins.api.gradle.plugin...

org.openapitools:openapi-generator-gradle-plugin (3.1.0), org.openapitools:openapi-generator-maven-plugin (3.1.0) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.1.0)

org.openapitools:openapi-generator MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.0), org.openapitools:openapi-generator-maven-plugin (3.2.0) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.0)

org.openapitools:openapi-generator MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.1), org.openapitools:openapi-generator-maven-plugin (3.2.1) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.1)

org.openapitools:openapi-generator MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.2), org.openapitools:openapi-generator-maven-plugin (3.2.2) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.2)

org.openapitools:openapi-generator MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.1), org.openapitools:openapi-generator-maven-plugin (3.3.1) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.1)

org.openapitools:openapi-generator MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.1 -...

CVE-2021-21361

The com.bmuschko:gradle-vagrant-plugin Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors. This is fixe...

CVE-2021-21361

The com.bmuschko:gradle-vagrant-plugin Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors. This is fixe...

CVE-2021-21361

The CVE-2021-21361 entry concerns the Gradle plugin com.bmuschko:gradle-vagrant-plugin, which exposes an information disclosure vulnerability by logging system environment variables when the plugin runs in public CI/CD environments. Affected component: the GDKExternalProcessExecutor.groovy flow a...

GHSA-JPCM-4485-69P7 Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin

Impact The com.bmuschko:gradle-vagrant-plugin Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors. Patch...

com.bmuschko.vagrant-base:com.bmuschko.vagrant-base.gradle.plugin (>=2.0, <=2.2.1), com.bmuschko.vagrant:com.bmuschko.vagrant.gradle.plugin (>=2.0, <=2.2.1) potentially affected by CVE-2021-21361 via com.bmuschko:gradle-vagrant-plugin (>=2.0, <=2.2.1)

com.bmuschko:gradle-vagrant-plugin MAVEN version =2.0, =2.0, =2.0, =2.2.1 Source cves: CVE-2021-21361 Source advisory: OSV:GHSA-JPCM-4485-69P7...

Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin

Impact The com.bmuschko:gradle-vagrant-plugin Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors. Patch...

CVE-2021-26719

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor with certain credentials can perform a registration step such that craft...

CVE-2021-26719

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor with certain credentials can perform a registration step such that craft...

CVE-2021-26719: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor with certain credentials can perform a registration step such that craft...