Arrow-kt

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Arrow-kt records in CISA KEV

No Arrow-kt vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Arrow · all components

TI-2019-08520 CVE-2019-11404 · GHSA-rcj2-vvjx-87pm

LOW 38

arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01136 Published 2019-04-21 Fixed in 0.9.0 CWE-311