io.mangoo:mangooio-core (>=1.1.0-rc1, <=1.1.0-rc2), io.mangoo:mangooio-integration-test (>=1.1.0-rc1, <=1.1.0-rc2) +10 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.2.11.final)

io.undertow:undertow-core MAVEN version 1.2.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =2.1.0, =15.11.1, =15.11.1,...

io.mangoo:mangooio-core (>=1.1.0-rc1, <=1.1.0-rc2), io.mangoo:mangooio-integration-test (>=1.1.0-rc1, <=1.1.0-rc2) +10 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.2.11.final)

io.undertow:undertow-core MAVEN version 1.2.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =2.1.0, =15.11.1, =15.11.1,...

CVE-2021-21430

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data...

Design/Logic Flaw

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data...

cd.connect.openapi:connect-openapi-dart (>=4.1, <=4.7), cd.connect.openapi:connect-openapi-jersey2 (>=4.1, <=4.11) +1 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - cd.connect.openapi:connect-openapi-dart =4.1, =4.1, =1.1, =2.1...

cd.connect.openapi:connect-openapi-jersey2 (>=5.1, <=5.4), io.solvice:onroute-client (>=0.1.4, <=0.1.8) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.3.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - cd.connect.openapi:connect-openapi-jersey2 =5.1, =0.1.4, =0.1.8...