TI-2022-09526 CVE-2022-26049 · GHSA-p2f7-9cv7-jjf6
Arbitrary File Write via Archive Extraction (Zip Slip)
Priority MEDIUM 43
This affects the package com.diffplug.gradle:goomph before 3.37.2.
Vulnerabilities
3 records
TI-2019-08018 CVE-2019-10753 · GHSA-gvxv-5fp2-358q
In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version…
Priority LOW 28
In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecur…
TI-2019-07225 CVE-2019-9843 · GHSA-7v35-qwwj-p98g
In DiffPlug Spotless before 1.20.0 (library and Maven plugin) and before 3.20.0 (Gradle…
Priority LOW 36
In DiffPlug Spotless before 1.20.0 (library and Maven plugin) and before 3.20.0 (Gradle plugin), the XML parser would resolve external entities over both HTTP and HTTPS and didn't respect the resolveExternalEntities sett…