How many CVEs does swagger-api have?

swagger-api has 12 published CVE records since 2017, including 2 in the last two years.

How many swagger-api CVEs are in CISA KEV?

None of swagger-api's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which swagger-api products have the most CVEs?

The swagger-api products with the most published CVEs are swagger-ui, io.swagger:swagger-parser, Swagger Petstore, org.webjars:swagger-ui, swagger-codegen.

What are the most common weakness types in swagger-api CVEs?

swagger-api's CVEs most often map to these CWE weakness types: CWE-378 (Creation of Temporary File With Insecure Permissions), CWE-1188 (Initialization of a Resource with an Insecure Default), CWE-20 (Improper Input Validation), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).

Are there public exploits for swagger-api vulnerabilities?

Yes — 4 of swagger-api's CVEs have a known public exploit.

How many critical swagger-api vulnerabilities are there?

swagger-api has 2 critical and 2 high-severity CVEs.

What is the average severity of swagger-api CVEs?

The average CVSS base score across swagger-api's scored CVEs is 6.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

12 CVEs

swagger-api Vulnerabilities

Name: swagger-api vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for swagger-api.

12

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

6.9

Avg CVSS

2017–2025

Overview

swagger-api has 12 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting swagger-api products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on swagger-api's vulnerability posture, as a share of its 12 published CVEs.

Average CVSS: 6.9
Critical / high: 33%
Actively exploited (KEV): 0%
Public exploit available: 33%
Patch available: 83%

Severity and exploitation

How the CVSS severity of swagger-api's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium8

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of swagger-api's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of swagger-api's CVEs have a known public exploit available.

Most affected products

The swagger-api products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in swagger-api CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish swagger-api CVE records.

Disclosure activity by year

How many swagger-api CVEs were published each year.

2017

3

2019

2

2021

2

2022

2

2024

1

2025

2

Latest swagger-api CVEs

The most recently disclosed vulnerabilities affecting swagger-api.

Medium vulnerability · 2025-09-25
CWE-77
Medium · CVSS 6.5
EPSS 0.4%2025-09-25
Medium vulnerability · 2025-09-25
CWE-79
Medium · CVSS 6.1
EPSS 0.4%2025-09-25
Default swagger-ui configuration exposes all files in the module
CWE-1188
Medium · CVSS 5.3
EPSS 2.0%2024-01-15
Medium vulnerability · 2022-03-11
Medium · CVSS 6.1
EPSS 1.5%2022-03-11
Medium vulnerability · 2022-03-11
CWE-20
Medium · CVSS 4.3
EPSS 42.3%2022-03-11
Critical vulnerability · 2021-03-11
CWE-378
Critical · CVSS 9.3
EPSS 0.4%2021-03-11
Medium vulnerability · 2021-03-11
CWE-378
Medium · CVSS 6.2
EPSS 0.3%2021-03-11
Medium vulnerability · 2019-12-20
Medium · CVSS 6.1
EPSS 4.0%2019-12-20
Critical vulnerability · 2019-10-10
Critical · CVSS 9.3
EPSS 5.6%2019-10-10
High vulnerability · 2017-11-27
High · CVSS 8.8
EPSS 1.6%2017-11-27
High vulnerability · 2017-11-17
High · CVSS 8.8
EPSS 1.7%2017-11-17
Medium vulnerability · 2017-04-10
Medium · CVSS 6.1
EPSS 1.0%2017-04-10

Track new swagger-api CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor swagger-api CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft25,696 CVEs linux21,056 CVEs Google15,680 CVEs Apple14,957 CVEs Oracle11,815 CVEs Debian10,221 CVEs IBM8,381 CVEs Red Hat7,837 CVEs

Browse all vendors

Frequently asked questions

Common questions about swagger-api vulnerabilities.

How many CVEs does swagger-api have?: swagger-api has 12 published CVE records since 2017, including 2 in the last two years.
How many swagger-api CVEs are in CISA KEV?: None of swagger-api's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which swagger-api products have the most CVEs?: The swagger-api products with the most published CVEs are swagger-ui, io.swagger:swagger-parser, Swagger Petstore, org.webjars:swagger-ui, swagger-codegen.
What are the most common weakness types in swagger-api CVEs?: swagger-api's CVEs most often map to these CWE weakness types: CWE-378 (Creation of Temporary File With Insecure Permissions), CWE-1188 (Initialization of a Resource with an Insecure Default), CWE-20 (Improper Input Validation), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
Are there public exploits for swagger-api vulnerabilities?: Yes — 4 of swagger-api's CVEs have a known public exploit.
How many critical swagger-api vulnerabilities are there?: swagger-api has 2 critical and 2 high-severity CVEs.
What is the average severity of swagger-api CVEs?: The average CVSS base score across swagger-api's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track swagger-api vulnerabilities

Monitor new swagger-api vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing