CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통 |
Cross-Site Scripting in swagger-ui |
| 11/09/2020 |
| GHSA-4f9m-pxwh-68hg | 보통6.5 | Cross-Site Scripting in swagger-ui | 11/09/2020 |
| GHSA-388g-jwpg-x6j4 | 보통6.5 | Cross-Site Scripting in swagger-ui | 11/09/2020 |
| GHSA-g336-c7wv-8hp3 | 심각 | Cross-Site Scripting in swagger-ui | 01/09/2020 |
| CVE-2016-1000233 | 높음 | Cross-Site Scripting in swagger-ui | 01/09/2020 |
| CVE-2016-1000226 | 심각 | Cross-Site Scripting in swagger-ui | 01/09/2020 |
| CVE-2016-1000229 | 보통6.1 | swagger-ui has XSS in key names | 20/12/2019 |
| CVE-2019-17495 | 심각9.8 | A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untr | 10/10/2019 |
| GHSA-x9p2-fxq6-2m5f | 보통4.3 | Reverse Tabnapping in swagger-ui | 20/06/2019 |
| CVE-2016-5682 | 보통6.1 | Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section. | 10/04/2017 |