Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
swagger-api/swagger-parser
master @ fcbd9ed
4
Fixes
2
CVEs
CRITICAL
Peak severity
50.0%
Coverage
Highlights
SSRF: 3 prior fixes. Scrutinize any change in this area.
modules/swagger-parser-v3/src/main/java/io/swagger/v3/parser/ResolverCache.java: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Remote Code Execution: Instantiating a YAML parser with default settings allowed attackers to trigger arbitrary object creation and Java deserialization payloads. Ensuring that all SnakeYAML instances utilize SafeConstructor is critical to avoiding this class of RCE.
SSRF: Attackers could bypass PermittedUrlsChecker filters and reference-resolution allowlists using schema definitions pointing to internal URLs. Incomplete validation of external $ref properties allows malicious documents to map internal network spaces.
SSRF: Case-sensitivity mismatches in URI scheme validation allowed routing handlers to bypass intended security filters (e.g., routing references using mixed-case schemes to bypass direct HTTP blocklists).