Description
All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Eclipse Foundation | Eclipse Xtext | unspecified – < 2.18.0 | 2.18.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.eclipse.xtend:org.eclipse.xtend.core | < 2.18.0 | 2.18.0 | GHSA-rfj2-4g26-7jw5 |
| Maven | org.eclipse.xtext:org.eclipse.xtext | < 2.18.0 | 2.18.0 | GHSA-rfj2-4g26-7jw5 |