org.openapitools/openapi-generator-maven-plugin vulnerabilities

Latest org.openapitools/openapi-generator-maven-plugin CVEs

Newest publication first

1. CVE-2021-21429 Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin

   Published 2021-04-27

   Low·CVSS 3.3 EPSS 0.30%

   OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data v...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.