CVE-2019-11404

Published April 22nd, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECTS

Description

arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.

arrow-kt/arrow

The perfect companion for your Kotlin journey - Inspired by functional, data-oriented and concurrent programming

GitHub

6.55K

arrow-kt/ank

ΛNK: Compile time docs verification and evaluation for Kotlin and Java (Temporarily moved to Arrow-kt)

GitHub