CVE-2019-1010260

CVE-2019-1010260 describes an arbitrary code execution vulnerability in ktlint, affecting versions prior to 0.30.0. This critical flaw allows a Man-in-the-Middle (MITM) attacker to compromise HTTP connections to artifact servers, enabling the download and execution of malicious custom ruleset JARs. With a CVSS score of 8.1 (High), the attack requires high attack complexity but can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.