Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-11404
4.3
MEDIUMCVSS v2
Published
April 22, 2019
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.
apache/arrow
GitHubApache Arrow is the universal columnar format and multi-language toolbox for fast data interchange and in-memory analytics
GitHubApache Arrow is the universal columnar format and multi-language toolbox for fast data interchange and in-memory analytics< 0.9.0NVD
arrow-kt/arrowGitHubThe perfect companion for your Kotlin journey - Inspired by functional, data-oriented and concurrent programming
GitHubThe perfect companion for your Kotlin journey - Inspired by functional, data-oriented and concurrent programming< 0.9.0NVD