npm/swagger-ui: medium
Server side request forgery in SwaggerUI
Action: Upgrade swagger-ui to 4.1.3 or later.
npm i swagger-ui@4.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.3 | - |
Fixed versions
| 4.1.3 |
Sources
- osv: GHSA-qrmm-w75w-3wpx
- https://github.com/swagger-api/swagger-ui/security/advisories/GHSA-qrmm-w75w-3wpx
- https://github.com/swagger-api/swagger-ui/issues/4872
- https://github.com/domaindrivendev/Swashbuckle.AspNetCore/commit/401c7cb81e5efe835ceb8aae23e82057d57c7d29
- https://github.com/swagger-api/swagger-ui/commit/01a3e55960f864a0acf6a8d06e5ddaf6776a7f76
- https://github.com/swagger-api/swagger-ui
published · modified · JSON