smartbear swagger-ui vulnerabilities

Latest smartbear swagger-ui CVEs

Newest publication first

1. CVE-2016-1000229 Improper Neutralization of Input During Web Page Generation in swagger-ui

   Published 2019-12-20

   Medium·CVSS 6.1 EPSS 4.0%

   swagger-ui has XSS in key names

2. CVE-2016-5682 Cross-Site Scripting in swagger-ui

   Published 2017-04-10

   Medium·CVSS 6.1 EPSS 1.0%

   Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.