Skip to content
OpenAdvisories

Package · Maven

org.openapitools:openapi-generator

2 known vulnerabilities.

2 results · Feed

  • Medium 6.2

    Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code

    OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.createTempFile` in JDK will result in creating and using insecure temporary files that…

  • High 8.1

    OpenAPI Tools OpenAPI Generator uses HTTP in various files

    OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.