CVE-2021-23331
1 advisory.
Maven/com.squareup:connect CVE-2021-23331: low 3.3
Insecure temporary file used in com.squareup:connect
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.20191120.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-q4hm-fwc9-hmv6
- https://nvd.nist.gov/vuln/detail/CVE-2021-23331
- https://github.com/square/connect-java-sdk
- https://github.com/square/connect-java-sdk/blob/master/src/main/java/com/squareup/connect/ApiClient.java%23L613
- https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUP-1065988
CVE-2021-23331 · published · modified · JSON