io.swagger:swagger-codegen (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package io.swagger:swagger-codegen, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2017-1000207 — CVSS 8.8 (high): A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary…
• CVE-2017-1000208 — CVSS 8.8 (high): A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a…
• CVE-2021-21363 — CVSS 5.3 (medium): swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs…
• CVE-2021-21364 — CVSS 5.3 (medium): swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs…