Search for packages
| purl | pkg:npm/swagger-ui@3.0.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-gdhu-jxfv-k7a9
Aliases: CVE-2019-17495 GHSA-c427-hjc3-wrfw |
Injection Vulnerability A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that `<style>@import` within the JSON data was a functional attack method. |
Affected by 0 other vulnerabilities. |
|
VCID-h64t-4k96-h7d4
Aliases: GHSA-x9p2-fxq6-2m5f GMS-2019-143 |
Reverse Tabnapping in swagger-ui Versions of `swagger-ui` prior to 3.18.0 are vulnerable to [Reverse Tabnapping](https://www.owasp.org/index.php/Reverse_Tabnabbing). The package uses `target='_blank'` in anchor tags, allowing attackers to access `window.opener` for the original page. This is commonly used for phishing attacks. ## Recommendation Upgrade to version 3.18.0 or later. |
Affected by 2 other vulnerabilities. |
|
VCID-mpx5-7r4y-77a9
Aliases: GHSA-4f9m-pxwh-68hg GMS-2020-782 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in swagger-ui. |
Affected by 1 other vulnerability. |
|
VCID-wfzu-tsmb-nqf1
Aliases: GHSA-388g-jwpg-x6j4 GMS-2020-781 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in swagger-ui. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T20:38:43.177905+00:00 | GitLab Importer | Affected by | VCID-wfzu-tsmb-nqf1 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/swagger-ui/GMS-2020-781.yml | 38.6.0 |
| 2026-06-04T20:38:30.009042+00:00 | GitLab Importer | Affected by | VCID-mpx5-7r4y-77a9 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/swagger-ui/GMS-2020-782.yml | 38.6.0 |
| 2026-06-04T20:24:55.402337+00:00 | GitLab Importer | Affected by | VCID-gdhu-jxfv-k7a9 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/swagger-ui/CVE-2019-17495.yml | 38.6.0 |
| 2026-06-04T20:22:57.355121+00:00 | GitLab Importer | Affected by | VCID-h64t-4k96-h7d4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/swagger-ui/GMS-2019-143.yml | 38.6.0 |