Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:17:04 +0000 EUVD-2026-244513 https://cve.radiocsirt.org/vuln/euvd-2026-244513 EUVD-2026-244513 https://cve.radiocsirt.org/vuln/euvd-2026-244513 fkie_cve-2024-22207 https://cve.radiocsirt.org/vuln/fkie_cve-2024-22207 <p>fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module&#39;s directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.</p> <p>fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module&#39;s directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-22207 GHSA-62jr-84gf-wmg4 — Default swagger-ui configuration exposes all files in the module https://cve.radiocsirt.org/vuln/ghsa-62jr-84gf-wmg4 <p><strong>Affected:</strong> npm: @fastify/swagger-ui</p> <p>### Impact</p> <p>The default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module&#39;s directory being exposed via http routes served by the module.</p> <p>### Patches</p> <p>Update to v2.1.0</p> <p>### Workarounds</p> <p>Use the `baseDir` option</p> <p>### References</p> <p>[HackerOne report ](https://hackerone.com/reports/2312369).</p> <p><strong>Affected:</strong> npm: @fastify/swagger-ui</p> <p>### Impact</p> <p>The default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module&#39;s directory being exposed via http routes served by the module.</p> <p>### Patches</p> <p>Update to v2.1.0</p> <p>### Workarounds</p> <p>Use the `baseDir` option</p> <p>### References</p> <p>[HackerOne report ](https://hackerone.com/reports/2312369).</p> https://cve.radiocsirt.org/vuln/ghsa-62jr-84gf-wmg4 gsd-2024-22207 https://cve.radiocsirt.org/vuln/gsd-2024-22207 gsd-2024-22207 https://cve.radiocsirt.org/vuln/gsd-2024-22207