Maven/io.swagger:swagger-codegen CVE-2017-1000207: high 8.8
Deserialization of Untrusted Data in swagger-codegen
Action: Upgrade io.swagger:swagger-codegen to 2.2.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.2 | - |
Fixed versions
| 2.2.2 |
Sources
- osv: GHSA-vgvf-9jh3-fg75#Maven/io.swagger:swagger-codegen
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000207
- https://github.com/swagger-api/swagger-parser/pull/481
- https://github.com/advisories/GHSA-vgvf-9jh3-fg75
- https://github.com/swagger-api/swagger-parser
- https://lgtm.com/blog/swagger_snakeyaml_CVE-2017-1000207_CVE-2017-1000208
CVE-2017-1000207 · published · modified · JSON