org.openapitools/openapi-generator vulnerabilities

Latest org.openapitools/openapi-generator CVEs

Newest publication first

1. CVE-2021-21430 Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code

   Published 2021-05-10

   Medium·CVSS 5.5 EPSS 0.40%

   OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application...

2. CVE-2019-11405 OpenAPI Tools OpenAPI Generator uses HTTP in various files

   Published 2019-04-21

   High·CVSS 7.4 EPSS 1.2%

   OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.