Diffplug - vulnerabilities (CVEs)

3 CVEs in 6 products, 0 in the last 30 days, newest from 2022-09-11.

Products

• Eclipse-cdt - 1 CVEs
• Eclipse-groovy - 1 CVEs
• Eclipse-wtp - 1 CVEs
• Goomph - 1 CVEs
• Gradle - 1 CVEs
• Maven - 1 CVEs

Newest CVEs of Diffplug

• CVE-2022-26049 - CVSS 8.8 (high), 2022-09-11: This affects the package com.diffplug.gradle:goomph before 3.37.2. It allows a malicious zip file to potentially break out of the expected destination…
• CVE-2019-10753 - CVSS 5.9 (medium), 2019-09-05: In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for…
• CVE-2019-9843 - CVSS 7.5 (high), 2019-06-28: In DiffPlug Spotless before 1.20.0 (library and Maven plugin) and before 3.20.0 (Gradle plugin), the XML parser would resolve external entities over both HTTP…