Path Traversal in @wturyn/swagger-injector

All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package...

GHSA-4X7W-FRCQ-V4M3 Path Traversal in @wturyn/swagger-injector

All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package...

Path Traversal in swagger-injector

All versions of swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package until a...

fleek-response (>=0.4.2, <=0.4.3), fleek-router (>=0.4.2, <=1.2.3) potentially affected by unknown CVE via swagger-injector (>=1.2.0, <=2.0.9)

swagger-injector NPM version =1.2.0, =0.4.2, =0.4.2, =1.2.3 Source cves: unknown CVE Source advisory: GHSA-V4X8-GW49-7HV4...

fleek-response (>=0.4.2, <=0.4.3), fleek-router (>=0.4.2, <=1.2.3) potentially affected by unknown CVE via swagger-injector (>=1.2.0, <=2.0.9)

swagger-injector NPM version =1.2.0, =0.4.2, =0.4.2, =1.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-V4X8-GW49-7HV4...

GHSA-V4X8-GW49-7HV4 Path Traversal in swagger-injector

All versions of swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative package until a...

PT-2020-21034

Name of the Vulnerable Software and Affected Versions @wturyn/swagger-injector versions all Description The issue allows attackers to access server files outside of the configured dist folder using relative paths due to the package's failure to sanitize URLs. Recommendations Consider using an...

PT-2020-21505

Name of the Vulnerable Software and Affected Versions swagger-injector versions affected versions not specified Description The issue allows attackers to access server files outside of the configured dist folder using relative paths due to the package's failure to sanitize URLs. Recommendations A...

Path Traversal

Overview All versions of @wturyn/swagger-injector are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the configured dist folder using relative paths. Recommendation No fix is currently available. Consider using an alternative...