Maven/io.swagger:swagger-parser CVE-2017-1000208: high 8.8, EPSS 1.70%
Deserialization of Untrusted Data in swagger-parser
Action: Upgrade io.swagger:swagger-parser to 1.0.31 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.31 | - |
Fixed versions
| 1.0.31 |
Sources
- osv: GHSA-q7pf-qr96-2vq5#Maven/io.swagger:swagger-parser
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000208
- https://github.com/advisories/GHSA-q7pf-qr96-2vq5
- https://github.com/swagger-api/swagger-parser
- https://github.com/swagger-api/swagger-parser/releases/tag/v1.0.31
- https://lgtm.com/blog/swagger_snakeyaml_CVE-2017-1000207_CVE-2017-1000208
CVE-2017-1000208 · published · modified · JSON