Swig Project vulnerabilities
We track 2 vulnerabilities in Swig Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 15, 2023.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Swig Project vulnerabilities
- 7.5 High severity
Swig-templates: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
- 9.8 Critical severity
Swig-templates: Improper Control of Generation of Code
An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.