~ / search / GHSA-h8wp-wgcq-qhrf

GHSA-h8wp-wgcq-qhrf

Improper Neutralization of Input During Web Page Generation in swagger-ui

Source: GitHub Advisory Database (reviewed) Moderate CVE-2016-1000229

Packages

EcosystemPackageAffectedFixed in
npm swagger-ui < 2.2.1 2.2.1

Details

As written in the advisory (Markdown source, shown as plain text).

swagger-ui has XSS in key names

References

External links from the advisory. They lead to third-party sites.