Skip to content
OpenAdvisories

Package · npm

swagger-ui-dist

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-46708

    Spoofing attack in swagger-ui-dist

    The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's cli…

    swagger-ui-dist npm
  • Medium —
    GHSA-qrmm-w75w-3wpx

    Server side request forgery in SwaggerUI

    SwaggerUI supports displaying remote OpenAPI definitions through the `?url` parameter. This enables robust demonstration capabilities on sites like `petstore.swagger.io`, `editor.swagger.io`, and similar sites, where users often want to see what their OpenAPI…

    swagger-ui swagger-ui-dist Swashbuckle.AspNetCore.SwaggerUI swagger-ui-react npm NuGet