Vulnerabilities > Diffplug > Eclipse CDT > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-09-05 CVE-2019-10753 Incorrect Resource Transfer Between Spheres vulnerability in Diffplug Eclipse-Cdt, Eclipse-Groovy and Eclipse-Wtp
In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecure channel (http).
network
diffplug CWE-669
4.3