All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.
CVSS Score
8.1
EPSS Score
0.002
Published
2019-05-06