NuGet/Swashbuckle.AspNetCore.SwaggerUI: medium

Server side request forgery in SwaggerUI

Action: Upgrade Swashbuckle.AspNetCore.SwaggerUI to 6.3.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-qrmm-w75w-3wpx#NuGet/Swashbuckle.AspNetCore.SwaggerUI
• https://github.com/swagger-api/swagger-ui/security/advisories/GHSA-qrmm-w75w-3wpx
• https://github.com/swagger-api/swagger-ui/issues/4872
• https://github.com/domaindrivendev/Swashbuckle.AspNetCore/commit/401c7cb81e5efe835ceb8aae23e82057d57c7d29
• https://github.com/swagger-api/swagger-ui/commit/01a3e55960f864a0acf6a8d06e5ddaf6776a7f76
• https://github.com/swagger-api/swagger-ui

published 2021-12-09T19:08:38Z · modified 2026-09-10T03:49:10.633152133Z · JSON