Skip to content

Vendor

swagger vulnerabilities

2 published CVES affecting swagger, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of swagger alerts

Products

Latest swagger CVEs

Newest publication first

  1. CVE-2017-1000207 Deserialization of Untrusted Data in swagger-codegen

    Published
    HighCVSS 8.8 EPSS 1.6%

    A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validat...

  2. CVE-2017-1000208 Deserialization of Untrusted Data in swagger-parser

    Published
    HighCVSS 8.8 EPSS 1.7%

    A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in swagger-codegen (<= 2...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.