-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump Swagger UI Dependency to latest #4068
Comments
huzaifa074
changed the title
Bump Swagger UI Dependency to 4.0.2
Bump Swagger UI Dependency to 4.1.3
Aug 16, 2023
huzaifa074
changed the title
Bump Swagger UI Dependency to 4.1.3
Bump Swagger UI Dependency to latest
Aug 16, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
We are using springfox swagger in our projects and we received a vulnerability issue from Cobalt who tests our services against vulnerabilities.
The fix to that vulnerability is to disable the
config_url
query param as any exploiter may add some phishing url to that url and load a malicious configuration file on our network.Here is a same issue and its fixed from swagger side. Now you need to upgrade swagger-ui dependency as its blocking us from using the springfox.
The text was updated successfully, but these errors were encountered: