Maven/org.openapitools:openapi-generator-maven-plugin CVE-2021-21429: medium 4, EPSS 0.30%
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin
Action: Upgrade org.openapitools:openapi-generator-maven-plugin to 5.1.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.0 | - |
Fixed versions
| 5.1.0 |
Sources
- osv: GHSA-867q-77cc-98mv
- https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-867q-77cc-98mv
- https://nvd.nist.gov/vuln/detail/CVE-2021-21429
- https://github.com/OpenAPITools/openapi-generator/pull/8795
- https://github.com/OpenAPITools/openapi-generator/blob/06ad7a51eff04393203cfa715e54e1fb59d984fe/modules/openapi-generator-maven-plugin/src/main/java/org/openapitools/codegen/plugin/CodeGenMojo.java#L782-L799
CVE-2021-21429 · published · modified · JSON