github_osv/GHSA-pmxf-4v8c-rwr7
Incorrect Resource Transfer Between Spheres in Grails
Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP.
gitlab/maven/org.grails/grails-core/CVE-2019-12728
MITM vulnerability
Grails uses cleartext HTTP to resolve the SDKMan notification service.