CVE-2016-1000249
1 advisory.
npm/fury-adapter-swagger CVE-2016-1000249: high 7.3
fury-adapter-swagger allows arbitrary file read from system
Action: Upgrade fury-adapter-swagger to 0.9.7 or later.
npm i fury-adapter-swagger@0.9.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 0.9.7 | - |
Fixed versions
| 0.9.7 |
Sources
- osv: GHSA-2r7f-4h2c-5x73
- https://github.com/apiaryio/fury-adapter-swagger/pull/89
- https://github.com/apiaryio/fury-adapter-swagger/commit/777e2d68f03546a88f3203bbd4725df8b1f662a7
- https://github.com/apiaryio/fury-adapter-swagger/commit/f4407e3a5323bc31123d45dbc93b8417002e4d51#diff-54c345dc104dc19440f9c2482b7883df820e8b9b699fdd8fa07e2773e7197a29
- https://github.com/apiaryio/fury-adapter-swagger
- https://security.snyk.io/vuln/npm:fury-adapter-swagger:20161024
- https://www.npmjs.com/advisories/305
CVE-2016-1000249 · published · modified · JSON