Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-x9p2-fxq6-2m5f

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-x9p2-fxq6-2m5f

Reverse Tabnapping in swagger-ui Versions of `swagger-ui` prior to 3.18.0 are vulnerable to Reverse Tabnapping https://www.owasp.org/index.php/Reverse_Tabnabbing. The package uses `target='_blank'` in anchor tags, allowing attackers to access `window.opener` for the original page. This is commonly used for phishing attacks. ## Recommendation Upgrade to version 3.18.0 or later.

gitlab/npm/swagger-ui/GMS-2019-143

Reverse Tabnapping in swagger-ui Versions of `swagger-ui` prior to 3.18.0 are vulnerable to Reverse Tabnapping https://www.owasp.org/index.php/Reverse_Tabnabbing. The package uses `target='_blank'` in anchor tags, allowing attackers to access `window.opener` for the original page. This is commonly used for phishing attacks. ## Recommendation Upgrade to version 3.18.0 or later.