SU
Product
Swagger UI
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 4Low 0
Watch
Add Swagger UI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1000229 | 6.1 | Dec 20 | swagger-ui has XSS in key names Affected: All versions, or not specified |
| CVE-2016-5682 | 6.1 | Apr 10 | Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section Affected: before 2.2.1 |
| CVE-2024-22207 | 5.3 | Jan 15 | fastify-swagger-ui is a Fastify plugin for serving Swagger UI Affected: 2.0.0 before 2.1.0 |
| CVE-2018-25031 | 4.3 | Mar 11 | Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks Affected: before 4.1.3 |
Showing 4
