Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/swagger-ui-dist@3.34.0
purl pkg:npm/swagger-ui-dist@3.34.0
Next non-vulnerable version 4.1.3
Latest non-vulnerable version 4.1.3
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-byuc-dyx4-zben
Aliases:
CVE-2021-46708
GHSA-6c9x-mj3g-h47x
Improper Restriction of Rendered UI Layers or Frames The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
4.1.3
Affected by 0 other vulnerabilities.
VCID-s2s9-qpgy-nffr
Aliases:
GHSA-qrmm-w75w-3wpx
GMS-2021-188
GMS-2021-327
GMS-2021-44
GMS-2021-470
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in swagger-ui-react.
4.1.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T01:35:09.847387+00:00 GitLab Importer Affected by VCID-byuc-dyx4-zben https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/swagger-ui-dist/CVE-2021-46708.yml 38.6.0
2026-06-06T01:12:57.326339+00:00 GitLab Importer Affected by VCID-s2s9-qpgy-nffr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/swagger-ui-dist/GMS-2021-44.yml 38.6.0