Skip to content
OpenAdvisories

Package · RubyGems

rswag

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-38337

    rswag vulnerable to arbitrary JSON and YAML file read via directory traversal

    rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.

    rswag RubyGems