Http-Swagger Project Http-Swagger
2 CVEs affecting Http-Swagger Project Http-Swagger. Latest disclosed: 2024-02-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24863 | High | 7.5 | 2022-04-18 | http-swagger is an open source wrapper to automatically generate RESTful API documentation with Swagger 2.0. In versions of http-swagger prior to 1.2.6 an atta… |
CVE-2024-25712 | Medium | 6.1 | 2024-02-29 | http-swagger before 1.2.6 allows XSS via PUT requests, because a file that has been uploaded (via httpSwagger.WrapHandler and *webdav.memFile) can subsequently… |