Description
Affected versions of swagger-ui contain a cross-site scripting vulnerability in the key names of a specific nested object in the JSON document.
Recommendation
Update the swagger-ui package to the latest compatible version. Followings are version details:
- Affected version(s): <= 2.2.0
- Patched version(s): 2.2.1
References
- GHSA-p239-93f7-h6xf
- www.npmjs.com
- community.rapid7.com
- CVE-2016-5682
- CWE-79
- CAPEC-310
- OWASP 2021-A3
- OWASP 2021-A6
Related Issues
- Cross-Site Scripting in swagger-ui - swagger-ui - GHSA-7f59-x49p-v8mq - CVE-2016-1000226
- Cross-Site Scripting in swagger-ui - swagger-ui - CVE-2016-1000233
- Bootstrap Cross-site Scripting vulnerability - bootstrap - GHSA-4p24-vmcr-4gqj - CVE-2016-10735
- Cross-Site Scripting in swagger-ui - swagger-ui - GHSA-22q9-hqm5-mhmc - Vulnerability
You might also like:
- Tags:
- npm
- swagger-ui
Anything's wrong? Let us know Last updated on January 09, 2023