VDB
Sign up
CRITICAL

GHSA-g336-c7wv-8hp3

Cross-Site Scripting in swagger-ui

Quick fix

GHSA-g336-c7wv-8hp3 — swagger-ui: upgrade to the fixed version with the command below.

npm install swagger-ui@2.2.1

Details

Affected versions of `swagger-ui` are vulnerable to cross-site scripting via the `url` query string parameter.

## Recommendation

Update to 2.2.1 or later.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/swagger-ui
Introduced in: 0Fixed in: 2.2.1
Fixnpm install swagger-ui@2.2.1

References