arrow-kt/ank

arrow-kt/ank

GitHubGitHub
GitHubgithub.com
GitHubgithub.com
Releases0
Stars54
ΛNK: Compile time docs verification and evaluation for Kotlin and Java (Temporarily moved to Arrow-kt)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-11404↗
—4.3 MEDIUM

arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.