Description
OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.
Remediation
References
https://github.com/OpenAPITools/openapi-generator/issues/2253
https://github.com/OpenAPITools/openapi-generator/pull/2248
https://github.com/OpenAPITools/openapi-generator/pull/2697
Related Vulnerabilities
CVE-2021-23448 Vulnerability in npm package config-handler
CVE-2021-37695 Vulnerability in maven package org.webjars.bowergithub.ckeditor:ckeditor4
CVE-2020-8203 Vulnerability in npm package @sailshq/lodash
CVE-2020-7606 Vulnerability in npm package docker-compose-remote-api
CVE-2022-46175 Vulnerability in maven package org.webjars.npm:json5