Swagger Petstore Sample 安全漏洞

Swagger Petstore Sample is a sample petstore system in the Swagger open source. A security vulnerability exists in Swagger Petstore Sample version 1.0.7, which stems from the /api/v3/pet interface not validating specially crafted scripts, which could lead to a cross-site scripting attack...

CVE-2025-29157

CVE-2025-29157 concerns the Swagger Petstore sample (version 1.0.7). The issue occurs when an attacker accesses a non-existent endpoint like /cart, causing the server to return a 404 error page that reveals sensitive information, including the servlet name (default) and server version. The descri...

PT-2025-39440

Name of the Vulnerable Software and Affected Versions petstore version 1.0.7 Description An issue allows a remote attacker to execute arbitrary code by accessing a non-existent endpoint /cart. The server responds with a 404-error page that reveals sensitive information, including the Servlet name...

CVE-2025-29156

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...

CVE-2025-29155

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint...

CVE-2025-29155

The CVE-2025-29155 entry describes a vulnerability in Swagger Petstore Sample (petstore) version 1.0.7 where a remote attacker can execute arbitrary code via the DELETE endpoint. Technical details across connected sources confirm the affected product/version and that the vulnerability arises from...

Malicious code in petstore-integration-test (npm)

The package petstore-integration-test was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 96991c4e15df35927756d154bf8d985ad4d42eb85514c35adb2a0cc2bdc7218e This package installs a dependency hosted on a custom domain th...

MAL-2025-42055 Malicious code in petstore-integration-test (npm)

The package petstore-integration-test was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 96991c4e15df35927756d154bf8d985ad4d42eb85514c35adb2a0cc2bdc7218e This package installs a dependency hosted on a custom domain th...

MAL-2025-37252 Malicious code in ts-petstore-client (npm)

The package ts-petstore-client was found to contain malicious code...

Malicious code in ts-petstore-client (npm)

The package ts-petstore-client was found to contain malicious code...

Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information

Exploit Title: Swagger UI 4.1.3 - User Interface UI Misrepresentation of Critical Information Date: 14 April, 2023 Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://swagger.io/ Version: 4.1.3 CVE: CVE-2018-25031 Site: https://rafaelcintralopes.com.br/ Usage: python swagger-exploit.py...

Malicious Package

Overview ts-petstore-client is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...