Description
Affected versions of swagger-ui are vulnerable to cross-site scripting in both the consumes and produces parameters of the swagger JSON document for a given API.
Recommendation
Update the swagger-ui package to the latest compatible version. Followings are version details:
- Affected version(s): < 2.2.1
- Patched version(s): 2.2.1
References
Related Issues
- Cross-Site Scripting in swagger-ui - swagger-ui - GHSA-p239-93f7-h6xf - CVE-2016-5682
- Cross-Site Scripting in swagger-ui - swagger-ui - CVE-2016-1000233
- Cross-Site Scripting in swagger-ui - swagger-ui - GHSA-g336-c7wv-8hp3 - Vulnerability
- Cross-Site Scripting in swagger-ui - swagger-ui - GHSA-22q9-hqm5-mhmc - Vulnerability
You might also like:
- Tags:
- npm
- swagger-ui
Anything's wrong? Let us know Last updated on January 09, 2023