io.springfox:springfox-swagger2@2.10.0 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the io.springfox:springfox-swagger2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Improper Input Validation

Affected versions of this package are vulnerable to Improper Input Validation. The input to the /api-docs?group= URL query parameter is untrusted input and is not encoded before being written to the log.

How to fix Improper Input Validation?

There is no fixed version for io.springfox:springfox-swagger2.

[2.10.0,)