io.swagger:swagger-codegen@2.4.0 vulnerabilities
-
latest version
2.4.39
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
4 months ago
-
licenses detected
- [2.1.1,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the io.swagger:swagger-codegen package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Affected versions of this package are vulnerable to Information Exposure. On unix-like systems, the temporary directory is shared between all users. As such, writing to this directory using API's that do not explicitly set the file/directory permissions can lead to information disclosure.
When files/directories are created using the How to fix Information Exposure? Upgrade |
[,2.4.19)
|