fastify/fastify-swagger-ui

Releases39

Frequency1 month 5 days

Last Release 12 days ago

Stars192

Serve Swagger-UI for Fastify

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-22207 ↗	Jan 15, 2024Monday, 15 January 2024, 16:15	5.3 MEDIUM	—
fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.