Swagger-ui

This hub aggregates every CVE we track for Swagger-ui, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 14 most recently published vulnerabilities affecting Swagger-ui.

• CVE-2018-25031Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote ...4.3Mar 11, 2022
• GHSA-qrmm-w75w-3wpxServer side request forgery in SwaggerUIDec 9, 2021
• GHSA-w992-2gmj-9xxjCross-Site Scripting in swagger-uiSep 11, 2020
• GHSA-22q9-hqm5-mhmcCross-Site Scripting in swagger-uiSep 11, 2020
• GHSA-vp93-gcx5-4w52Cross-Site Scripting in swagger-uiSep 11, 2020
• GHSA-388g-jwpg-x6j4Cross-Site Scripting in swagger-uiSep 11, 2020
• GHSA-4f9m-pxwh-68hgCross-Site Scripting in swagger-uiSep 11, 2020
• GHSA-g336-c7wv-8hp3Cross-Site Scripting in swagger-uiSep 1, 2020
• CVE-2016-1000233Cross-Site Scripting in swagger-uiSep 1, 2020
• CVE-2016-1000226Cross-Site Scripting in swagger-uiSep 1, 2020
• CVE-2016-1000229swagger-ui has XSS in key names6.1Dec 20, 2019
• CVE-2019-17495A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfilt...9.8Oct 10, 2019
• GHSA-x9p2-fxq6-2m5fReverse Tabnapping in swagger-uiJun 20, 2019
• CVE-2016-5682Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.6.1Apr 10, 2017