GMS-2020-784: Cross-Site Scripting in swagger-ui

September 1, 2020 (updated September 23, 2021)

Affected versions of swagger-ui are vulnerable to cross-site scripting via the url query string parameter.

Recommendation

Update to 2.2.1 or later.

References

github.com/advisories/GHSA-g336-c7wv-8hp3
github.com/swagger-api/swagger-ui/issues/1617
www.npmjs.com/advisories/137

Code Behaviors & Features

Detect and mitigate GMS-2020-784 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →