de.learnlib.distribution:learnlib-distribution (0.15.0), io.github.lhogie:onlinegraph (0.0.1) +9 more potentially affected by unknown CVE via com.paypal.digraph:digraph-parser (1.0)

com.paypal.digraph:digraph-parser MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.paypal.digraph:digraph-parser and may be impacted: - de.learnlib.distribution:learnlib-distribution 0.15.0 - io.github.lhogie:onlinegraph 0.0.1 -...

Unsafe Dependency Resolution

Overview com.paypal.digraph:digraph-parser is a Java parser for digraph DSL Graphviz DOT language. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an insecure channel http. If the build occurred over an insecure connection, a...