Maven/io.swagger:swagger-parser CVE-2017-1000207: high 8.8, EPSS 1.62%
Deserialization of Untrusted Data in swagger-codegen
Action: Upgrade io.swagger:swagger-parser to 1.0.31 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.31 | - |
Fixed versions
| 1.0.31 |
Sources
- osv: GHSA-vgvf-9jh3-fg75
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000207
- https://github.com/swagger-api/swagger-parser/pull/481
- https://github.com/advisories/GHSA-vgvf-9jh3-fg75
- https://github.com/swagger-api/swagger-parser
- https://lgtm.com/blog/swagger_snakeyaml_CVE-2017-1000207_CVE-2017-1000208
CVE-2017-1000207 · published · modified · JSON