← All advisories

Moderate severityNVD Advisory· Published Dec 20, 2019· Updated Aug 6, 2024

CVE-2016-1000229

CVE-2016-1000229

Description

swagger-ui has XSS in key names

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
swagger-uinpm	< 2.2.1	2.2.1

Affected products

2

swagger-ui/swagger-uidescription
ghsa-coords
pkg:npm/swagger-ui
Range: < 2.2.1

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

github.com/advisories/GHSA-h8wp-wgcq-qhrfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-1000229ghsaADVISORY
www.securityfocus.com/bid/97580mitrex_refsource_MISC
access.redhat.com/errata/RHSA-2017:0868ghsax_refsource_MISCWEB
bugzilla.redhat.com/show_bug.cgighsax_refsource_MISCWEB
raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000229.jsonmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.