Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Swagger UI Dependency to latest #4068

Open
huzaifa074 opened this issue Aug 16, 2023 · 0 comments
Open

Bump Swagger UI Dependency to latest #4068

huzaifa074 opened this issue Aug 16, 2023 · 0 comments

Comments

@huzaifa074
Copy link

We are using springfox swagger in our projects and we received a vulnerability issue from Cobalt who tests our services against vulnerabilities.
The fix to that vulnerability is to disable the config_url query param as any exploiter may add some phishing url to that url and load a malicious configuration file on our network.
Here is a same issue and its fixed from swagger side. Now you need to upgrade swagger-ui dependency as its blocking us from using the springfox.

@huzaifa074 huzaifa074 changed the title Bump Swagger UI Dependency to 4.0.2 Bump Swagger UI Dependency to 4.1.3 Aug 16, 2023
@huzaifa074 huzaifa074 changed the title Bump Swagger UI Dependency to 4.1.3 Bump Swagger UI Dependency to latest Aug 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant