Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[TESTING][BULK PR] Tracking: HTTP Download of Dependencies Maven #7

Closed
JLLeitschuh opened this issue Jun 29, 2022 · 0 comments
Closed

[TESTING][BULK PR] Tracking: HTTP Download of Dependencies Maven #7

JLLeitschuh opened this issue Jun 29, 2022 · 0 comments

Comments

@JLLeitschuh
Copy link
Owner

Tracking issue for the bulk PR generation run to fix Maven POM files.
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/alibaba__tamper that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
fdf673a 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/ChestShop-authors__ChestShop-3 that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
effdad0 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/confluentinc__castle that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
cb31cbf 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/elastic__elasticsearch-hdfs that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
9f65150 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/GitHubLiHong__FtpGenerterTxt that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
d4f66c5 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/cschneider4711__Marathon that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
d77b655 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/apache__logging-log4j1 that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
746c4b5 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/google__creatine-ads-inspector that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
1796819 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/ong-bitcoin-argentina__DIDI-SSI-Semillas-backend that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
d8606a2 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/aesanch2__salesforce-migration-assistant that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
c4f481f 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/apache__incubator-optiq-linq4j that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
e837a50 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/awslabs__aws-codedeploy-plugin that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
3f0eefd 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/schugale13__PSE-Project2017 that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
a0d4772 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/jai-imageio__jai-imageio-jpeg2000 that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
c5c2596 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/Appverse__appverse-builder-api that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
8da6249 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/boaglio__jenkins-plugin-sqlplus-script-runner that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
9636bae 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/ibm__microprofile-meeting-concurrency that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
1ab8b33 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/junoyoon__simpleupdatesiterepo that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
07f4ff2 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/quartz-scheduler__quartz that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
b05a3d5 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/cgbystrom__netty-tools that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
2e9885c 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/ibm__ibm-cloud-devops that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
ffa34c3 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/Sage-Bionetworks__file-proxy that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
dfa76d7 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/OCR4all__OCR4all that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
f0ae6c4 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/GoogleCloudPlatform__java-recaptcha-password-check-helpers that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
0617a4e 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/cloudera__cm_ext that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
1a0a1b5 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/alibaba__auto-doc that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
9c30d8c 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/OwnYourData__oyd-pia that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
8ffdc08 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/GistLabs__mechanize that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
63e209c 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/perye__dokit that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
05f9a80 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/JetBrains__intellij-deps-log4j that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
a471837 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/Terracotta-OSS__offheap-store that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
3be2ca5 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/cscpswang__java-practice that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
b0dbeda 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/ibm__microprofile-meeting-websockets that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
ca22629 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/ibm__cloud-native-patterns that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
c145d3a 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/microsoft__azure-app-service-plugin that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
d0e3c22 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/jitsi__jitsi-videobridge-openfire-plugin that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
3ca71a2 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/tomdz__sphinx-maven that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
78aeaa4 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/alibaba__yugong that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
a83293f 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/jitsi__jitsi-videobridge-openfire-plugin that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
1d22630 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/wicknicks__cuenet that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
4ff2bcc 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/alibaba__yugong that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
3901383 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/verliokann__verliqps that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
dfa1f29 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/verliokann__verliqps that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
84f526e 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/white-cat__jeeweb-mybatis that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
aca1c91 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/tamingtext__book that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
b9b299f 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/white-cat__jeeweb-mybatis that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
449f89f 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/tamingtext__book that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
fc49805 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/poorhua__matchfee that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
c764699 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/ysc__APDPlat that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
b20c6ae 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/heichen__JeeSite that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
fd52802 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/Chentingz__TrafficMonitor4Floodlight that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
b3bb67b 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/xhujinjun__istart that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
31ee009 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/neo4j__neo4j-browser that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
034ec6c 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/xinxiamu__MuStudy that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
4309d5d 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/SpoonLabs__coming that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
c3e8f78 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/EasyinnovaSL__DPFManager that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
574e1d8 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/TechnionYP5777__UpAndGo that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
4e81212 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
JLLeitschuh added a commit to BulkSecurityGeneratorProjectV2/TechnionYP5777__UpAndGo that referenced this issue Jul 1, 2022
@JLLeitschuh @TeamModerne
vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291
c58bc9e 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSSS: 8.1
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: JLLeitschuh/security-research#7

Co-authored-by: Moderne <team@moderne.io>
@JLLeitschuh JLLeitschuh changed the title [BULK PR] Tracking: HTTP Download of Dependencies Maven [TESTING][BULK PR] Tracking: HTTP Download of Dependencies Maven Jul 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@JLLeitschuh