swag vulnerabilities

1 known vulnerability in swag from Go-openapi. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  swag: Uncontrolled Recursion

  CVE-2026-93450Sep 18, 2026Go-openapiEPSS 1.1%

  go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accep