Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.swagger:swagger-codegen

4 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 medium
Registry
Maven Central

Advisories 4

  • CVE-2021-21363Medium 5.3

    Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory

    Affected: fixed in 2.4.19.

  • CVE-2021-21364Medium 5.3

    Generated Code Contains Local Information Disclosure Vulnerability

    Affected: fixed in 2.4.19.

  • A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary…

    Affected: fixed in 2.2.2.

  • A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a…

    Affected: fixed in 2.2.2.