Description
Affected versions of swagger-ui are vulnerable to cross-site scripting in both the consumes and produces parameters of the swagger JSON document for a given API.
Recommendation
Update the swagger-ui package to the latest compatible version. Followings are version details:
- Affected version(s): < 2.2.1
- Patched version(s): 2.2.1
References
Related Issues
- Cross-Site Scripting in swagger-ui - swagger-ui - GHSA-p239-93f7-h6xf - CVE-2016-5682
- Cross-Site Scripting in swagger-ui - swagger-ui - CVE-2016-1000233
- Cross-Site Scripting in swagger-ui - swagger-ui - GHSA-4f9m-pxwh-68hg - Vulnerability
- Cross-Site Scripting in swagger-ui - swagger-ui - GHSA-388g-jwpg-x6j4 - Vulnerability
You might also like:
- Tags:
- npm
- swagger-ui
Anything's wrong? Let us know Last updated on January 09, 2023