877 matches found
CVE-2026-19765
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...
EUVD-2026-58559
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...
CVE-2026-19765
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...
CVE-2026-19765
The CVE affects eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5, specifically the fetch_swagger component and its loadSource function in src/utils/swagger-parser.ts. A manipulation allows server-side request forgery (SSRF) and can be exploited remotely. The description note...
PT-2026-71939
Name of the Vulnerable Software and Affected Versions eyaushev swagger-testcase-mcp affected versions not specified Description A flaw in the fetch swagger component allows for remote server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an...
CVE-2026-19765: Server-Side Request Forgery (SSRF)
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...
CLSA-2026-1786375655 TuxCare security update for swagger-ui-dist (2 CVEs)
TuxCare rebuilt swagger-ui-dist to address 2 CVEs. Fixed in 3.52.5-tuxcare.1...
CLSA-2026-1786359305 TuxCare security update for swagger-ui (3 CVEs)
TuxCare rebuilt swagger-ui to address 3 CVEs. Fixed in 2.2.10-tuxcare.2...
Emby Server - swagger-ui Path Traversal Detection
Detects Emby Server =3.2.5 directory traversal via encoded /emby/swagger-ui/../../../../etc/passwd path. !/usr/bin/env python3 -- coding: utf-8 -- """Emby Server swagger-ui path traversal.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...
PT-2026-80046
TuxCare rebuilt swagger-ui-dist to address 2 CVEs. Fixed in 3.52.5-tuxcare.1...
PT-2026-80024
TuxCare rebuilt swagger-ui to address 3 CVEs. Fixed in 2.2.10-tuxcare.2...
EUVD-2025-210645
The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...
CVE-2025-6508
The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...
CVE-2025-6508 User Interface Misrepresentation via Swagger UI Try-out Console in WSO2 API Manager Allows Sensitive Information Exposure or Unintended Requests
The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...
CVE-2025-6508 User Interface Misrepresentation via Swagger UI Try-out Console in WSO2 API Manager Allows Sensitive Information Exposure or Unintended Requests
The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...
CVE-2025-6508
The CVE-2025-6508 entry concerns the Swagger UI Try-out console in the WSO2 API Manager’s API Publisher docs. A misbehavior allows loading an external Swagger API definition URL, which overwrites existing API definitions in the Publisher portal. This deception can lead users to interact with over...
CVE-2025-6508: Improper Neutralization of Input During Web Page Generation
The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...
PT-2026-68633
Name of the Vulnerable Software and Affected Versions API Publisher affected versions not specified Description The Swagger UI Try-out console within the API Publisher documentation allows the loading of an external Swagger API definition URL, which overrides the existing API definitions in the...
Malicious code in dolyame-boxy-independent-bnpl-swagger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9922ed471321378d155bfabb5d15f3efe59f8524e30face28e25dadd3305b3 dolyame-boxy-independent-bnpl-swagger ships an index.js that unconditionally requires setup.js on load. setup.js reconstructs remote hostnames from...