search

scottie1984 / swagger-ui-express

Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
MIT License
1.42k stars 225 forks source link

Vulnerabilities in express #369

Closed hmdevelopermind closed 4 months ago

hmdevelopermind commented 6 months ago

I see a vulnerability for express used in this package CVE-2024-29041

image

References:

Url: https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd Url: https://expressjs.com/en/4x/api.html#res.location Url: https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94 Url: https://github.com/koajs/koa/issues/1800 Url: https://github.com/expressjs/express/security/advisories/GHSA-rv95-896h-c2vc Url: https://github.com/expressjs/express/pull/5539

Suggestion fix: Upgrade to version express - 4.19.0