Search for packages
| purl | pkg:npm/swagger-ui@2.2.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3v8v-mvbs-rkhu
Aliases: GHSA-qrmm-w75w-3wpx GMS-2021-188 GMS-2021-327 GMS-2021-44 GMS-2021-470 |
Server side request forgery in SwaggerUI |
Affected by 0 other vulnerabilities. |
|
VCID-4a5e-u6eu-a7g1
Aliases: GHSA-388g-jwpg-x6j4 GMS-2020-781 |
Cross-Site Scripting in swagger-ui |
Affected by 6 other vulnerabilities. |
|
VCID-e33g-ayx5-rffp
Aliases: CVE-2018-25031 GHSA-cr3q-pqgq-m8c2 |
Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be resolved in 4.1.3. However, third parties have indicated this is not resolved in 4.1.3 and even occurs in that version and possibly others. |
Affected by 0 other vulnerabilities. |
|
VCID-ha7j-575w-c7eu
Aliases: CVE-2019-17495 GHSA-c427-hjc3-wrfw |
Cross-site scripting in Swagger-UI |
Affected by 3 other vulnerabilities. |
|
VCID-jqwv-yhzm-gke8
Aliases: GHSA-x9p2-fxq6-2m5f GMS-2019-143 |
Reverse Tabnapping in swagger-ui |
Affected by 5 other vulnerabilities. |
|
VCID-n2b6-kqqb-c7hy
Aliases: GHSA-4f9m-pxwh-68hg GMS-2020-782 |
Cross-Site Scripting in swagger-ui |
Affected by 4 other vulnerabilities. |
|
VCID-zn7g-cnwj-fud3
Aliases: CVE-2021-46708 GHSA-6c9x-mj3g-h47x |
Spoofing attack in swagger-ui-dist |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||