358 matches found
HugoMario swagger-codegen information leakage vulnerability
HugoMario swagger-codegen is an application from HugoMario. It is used to automatically generate API client libraries generate SDKs, server stubs and documentation given an OpenAPI Spec. An information disclosure vulnerability exists in Swagger-codegen version 2.4.19. The vulnerability stems from...
glib2 security, bug fix, and enhancement update
2.56.4-7 - Backport patch for CVE-2019-12450 Resolves: 1722101 2.56.4-5 - Backport glib2 change needed for accountsservice dbus codegen fix Resolves: 1713081 2.56.4-4 - Back GHmac with GnuTLS for FIPS - Resolves: 1630260 2.56.4-3 - Backport per-desktop overrides - Resolves: 1715951 2.56.4-2 - Add...
be.fluid-it.tools.swagger:swagger-ng-module-codegen (>=0.1-1, <=0.1-5), ch.docksnet.codegen:decoupledspringmvc-swagger-codegen (0.0.2) +15 more potentially affected by CVE-2017-1000208 via io.swagger:swagger-codegen (>=2.1.1, <=2.2.1)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.1-1, =1.1, =2.1.3, =2.1.1, =1.0, =1.6.0, =0.4.2, =0.4.2, =0.4.2, =0.5.0-beta-1 and more Source cves: CVE-2017-1000208 Source advisory: OSV:GHSA-Q7PF-QR96-2VQ5...
be.fluid-it.tools.swagger:swagger-ng-module-codegen (>=0.1-1, <=0.1-5), ch.docksnet.codegen:decoupledspringmvc-swagger-codegen (0.0.2) +15 more potentially affected by CVE-2017-1000208 via io.swagger:swagger-codegen (>=2.1.1, <=2.2.1)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.1-1, =1.1, =2.1.3, =2.1.1, =1.0, =1.6.0, =0.4.2, =0.4.2, =0.4.2, =0.5.0-beta-1 and more Source cves: CVE-2017-1000208 Source advisory: GHSA-Q7PF-QR96-2VQ5...
Deserialization of Untrusted Data in swagger-parser
A vulnerability in Swagger-Parser's version = 1.0.30 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in swagger-codegen = 2.2.2 and can lead to...
GHSA-VGVF-9JH3-FG75 Deserialization of Untrusted Data in swagger-codegen
A vulnerability in Swagger-Parser's version = 1.0.30 and Swagger codegen version = 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in...
Deserialization of Untrusted Data in swagger-codegen
A vulnerability in Swagger-Parser's version = 1.0.30 and Swagger codegen version = 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in...
be.fluid-it.tools.swagger:swagger-ng-module-codegen (>=0.1-1, <=0.1-5), ch.docksnet.codegen:decoupledspringmvc-swagger-codegen (0.0.2) +15 more potentially affected by CVE-2017-1000207 +1 more via io.swagger:swagger-codegen (>=2.1.1, <=2.2.1)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.1-1, =1.1, =2.1.3, =2.1.1, =1.0, =1.6.0, =0.4.2, =0.4.2, =0.4.2, =0.5.0-beta-1 and more Source cves: CVE-2017-1000207, CVE-2017-1000208 Source advisory: OSV:GHSA-VGVF-9JH3-FG75...
be.fluid-it.tools.swagger:swagger-ng-module-codegen (>=0.1-1, <=0.1-5), ch.docksnet.codegen:decoupledspringmvc-swagger-codegen (0.0.2) +15 more potentially affected by CVE-2017-1000207 +1 more via io.swagger:swagger-codegen (>=2.1.1, <=2.2.1)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.1-1, =1.1, =2.1.3, =2.1.1, =1.0, =1.6.0, =0.4.2, =0.4.2, =0.4.2, =0.5.0-beta-1 and more Source cves: CVE-2017-1000207, CVE-2017-1000208 Source advisory: GHSA-VGVF-9JH3-FG75...
swagger-marshmallow-codegen (0.3.7) potentially affected by CVE-2018-17175 via marshmallow (0.2.1)
marshmallow PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on marshmallow and may be impacted: - swagger-marshmallow-codegen 0.3.7 Source cves: CVE-2018-17175 Source advisory: OSV:GHSA-9Q2P-FJ49-VPXJ...
swagger-marshmallow-codegen (0.3.7) potentially affected by CVE-2018-17175 via marshmallow (0.2.1)
marshmallow PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on marshmallow and may be impacted: - swagger-marshmallow-codegen 0.3.7 Source cves: CVE-2018-17175 Source advisory: OSV:PYSEC-2018-67...
Swagger Parser and Swagger codegen arbitrary code execution vulnerability
Swagger Parser is a Swagger cross-language REST API interface parser. swagger codegen is an API development tool. An arbitrary code execution vulnerability exists in the yaml parsing feature in Swagger Parser 1.0.30 and earlier and Swagger codegen 2.2.2 and earlier. An attacker can exploit this...
Design/Logic Flaw
A vulnerability in Swagger-Parser's version = 1.0.30 and Swagger codegen version = 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in...
CVE-2017-1000207
A vulnerability in Swagger-Parser's version = 1.0.30 and Swagger codegen version = 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in...
CVE-2017-1000207
A vulnerability in Swagger-Parser's version = 1.0.30 and Swagger codegen version = 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in...
CVE-2017-1000207
A vulnerability in Swagger-Parser's version = 1.0.30 and Swagger codegen version = 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in...
be.fluid-it.tools.swagger:swagger-ng-module-codegen (>=0.1-1, <=0.1-5), ch.docksnet.codegen:decoupledspringmvc-swagger-codegen (0.0.2) +15 more potentially affected by CVE-2017-1000207 +1 more via io.swagger:swagger-codegen (>=2.1.1, <=2.2.1)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.1-1, =1.1, =2.1.3, =2.1.1, =1.0, =1.6.0, =0.4.2, =0.4.2, =0.4.2, =0.5.0-beta-1 and more Source cves: CVE-2017-1000207, CVE-2017-1000208 Source advisory: MEND:CVE-2017-1000207...
CVE-2017-1000207
CVE-2017-1000207 concerns a vulnerability in Swagger-Parser (<= 1.0.30) and Swagger Codegen (
PT-2017-10905
Name of the Vulnerable Software and Affected Versions Swagger-Parser versions = 1.0.30 Swagger codegen versions = 2.2.2 Description A vulnerability in Swagger-Parser's yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is...
CVE-2017-1000207: Deserialization of Untrusted Data
A vulnerability in Swagger-Parser's version = 1.0.30 and Swagger codegen version = 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in...