Swagger

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Swagger records in CISA KEV

No Swagger vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Swagger-codegen 2 records MEDIUM Swagger-parser 2 records MEDIUM

Records

2 records in Swagger-codegen · all components

TI-2017-14526 CVE-2017-1000208 · GHSA-q7pf-qr96-2vq5

A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality…

MEDIUM 41

A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01705 Published 2017-11-17 Fixed in 2.2.2, 1.0.31 CWE-502

TI-2017-14525 CVE-2017-1000207 · GHSA-vgvf-9jh3-fg75

A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <=…

MEDIUM 41

A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is par…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01623 Published 2017-11-27 Fixed in 1.0.31, 2.2.2 CWE-502

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0