| Package | Affected versions | Patched versions |
|---|---|---|
| io.arrow-kt:arrow-ank-gradle | < 0.9.0 | 0.9.0 |
| arrow | < 0.9.0 | 0.9.0 |
arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free