Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.swagger/swagger-parser@1.0.31
purl pkg:maven/io.swagger/swagger-parser@1.0.31
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-b96v-1eu4-23ay Deserialization of Untrusted Data in swagger-parser A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in swagger-codegen (<= 2.2.2) and can lead to arbitrary code being executed when these commands are used on a well-crafted yaml specification. CVE-2017-1000208
GHSA-q7pf-qr96-2vq5
VCID-cra3-k2jw-jqe7 Deserialization of Untrusted Data in swagger-codegen A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in swagger-codegen (<= 2.2.2) and can lead to arbitrary code being executed when these commands are used on a well-crafted yaml specification. CVE-2017-1000207
GHSA-vgvf-9jh3-fg75

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T17:30:28.551236+00:00 GitLab Importer Fixing VCID-b96v-1eu4-23ay https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.swagger/swagger-parser/CVE-2017-1000208.yml 38.6.0
2026-05-29T17:30:28.180549+00:00 GitLab Importer Fixing VCID-cra3-k2jw-jqe7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.swagger/swagger-parser/CVE-2017-1000207.yml 38.6.0
2026-05-29T14:22:26.307262+00:00 GHSA Importer Fixing VCID-b96v-1eu4-23ay https://github.com/advisories/GHSA-q7pf-qr96-2vq5 38.6.0
2026-05-29T14:22:26.259919+00:00 GHSA Importer Fixing VCID-cra3-k2jw-jqe7 https://github.com/advisories/GHSA-vgvf-9jh3-fg75 38.6.0
2026-05-29T09:19:02.874372+00:00 GithubOSV Importer Fixing VCID-cra3-k2jw-jqe7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-vgvf-9jh3-fg75/GHSA-vgvf-9jh3-fg75.json 38.6.0
2026-05-29T09:19:00.104106+00:00 GithubOSV Importer Fixing VCID-b96v-1eu4-23ay https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-q7pf-qr96-2vq5/GHSA-q7pf-qr96-2vq5.json 38.6.0