CVE catalog

CVE-2019-10753

eclipse-wtp: CVE-2019-10753

Severity: Low
Source: [NVD] · [CVE record]
EPSS: 0.72% · Oct 25, 2026

In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecure channel (http). If the build occurred over an insecure connection, a malicious user could have perform a Man-in-the-Middle attack during the build and alter the build artifacts that were produced. In case that any of these artifacts were compromised, any developers using these could be altered. **Note:** In order to validate that this artifact was not compromised, the maintainer would need to confirm that none of the artifacts published to the registry were not altered with. Until this happens, we can not guarantee that this artifact was not compromised even though the probability that this happened is low.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	eclipse-wtp	sid	`3.35-1`	not affected
Debian	eclipse-wtp	forky	`3.35-1`	not affected
Debian	eclipse-wtp	bookworm	`3.18-6`	not affected

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	eclipse-wtp	source	sid	`Not affected`	unimportant	Not reported	Not reported
Debian	eclipse-wtp	source	forky	`Not affected`	unimportant	Not reported	Not reported
Debian	eclipse-wtp	source	bookworm	`Not affected`	unimportant	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libeclipse-jem-util-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 2.1.201+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 2.1.201+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-core-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.3.0+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.3.0+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-emf-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.600+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.600+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-emfworkbench-integration-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.101+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.101+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-environment-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.0.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.0.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-frameworks-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.201+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.201+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-frameworks-ui-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-project-facet-core-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.4.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.4.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-ui-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.1.700+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.1.700+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-common-uriresolver-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.300+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.300+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-sse-core-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-sse-ui-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.7.0+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.7.0+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-validation-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.800+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.800+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-validation-ui-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.600+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.600+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-xml-core-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.200+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.200+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-xml-ui-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.400+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
[libeclipse-wst-xsd-core-java]Not affected
Source package: [eclipse-wtp]
Details (2)
- 1.2.0+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm
- 1.2.0+eclipse3.18-6 · all · bookworm
  Not affected
  dsa · eclipse-wtp · debian · bookworm

Observed: Oct 23, 2026, 5:38:28 PM UTC

References

[https://security-tracker.debian.org/tracker/CVE-2019-10753]

[Debian Security Tracker] · [FIRST EPSS]