Skip to content
OpenAdvisories

Package · npm

@wturyn/swagger-injector

1 known vulnerabilities.

1 result · Feed

  • Critical —

    Path Traversal in @wturyn/swagger-injector

    All versions of `@wturyn/swagger-injector` are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured `dist` folder using relative paths. ## Recommendation No fix is currently avai…