Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Swagger Component: Swagger-parser Clear all filters
TI-2017-14525 CVE-2017-1000207 · GHSA-vgvf-9jh3-fg75

A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <=…

Priority MEDIUM 41

A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is par…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01623 Published 2017-11-27 Fixed in 1.0.31, 2.2.2 CWE-502