CVE-2019-11404
arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could ha…
Published: 2019-04-21 · CVSS: 8.1 · CVSS 3.0
arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7