VDB
Sign up
MEDIUM6.1

GHSA-h8wp-wgcq-qhrf

Improper Neutralization of Input During Web Page Generation in swagger-ui

Quick fix

GHSA-h8wp-wgcq-qhrf — swagger-ui: upgrade to the fixed version with the command below.

npm install swagger-ui@2.2.1

Details

swagger-ui has XSS in key names

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/swagger-ui
Introduced in: 0Fixed in: 2.2.1
Fixnpm install swagger-ui@2.2.1

References