CVE-2018-25031
MediumAdvisory
Published 12 Mar 2022In the index since 8 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.3
- base score, highest
- EPSS
- 0.423
- 99th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 11
- of 17,781 indexed, latest versions
- Container images
- 10
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Spoofing attack in swagger-ui
Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 10 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| swagger-uimaven | 2.1.0, 3.17.6, 3.23.11, 3.24.3+3 more | 4.1.3 | 10 |
- OSV records
- GHSA-cr3q-pqgq-m8c2
Charts affected
11 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| chart-app-vidapp-vid-chartVerified publisher | 0.0.7 | 1 of 2See more | 8,866 |
| clamapicnieg | 2.0.5 | 1 of 2See more | 4,671 |
| api-postsdniel | 0.9.1 | 1 of 1See more | 8,986 |
| komgageek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 12,581 |
| openkmgeek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 27,949 |
| sharrygeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 1,419 |
| pinotinseefrlab | 0.2.0 | 1 of 2See more | 10,777 |
| smtp-fake-serversomeblackmagic | 0.1.0 | 1 of 1See more | 4,278 |
| trinostatcan | 1.23.4 | 1 of 2See more | 13,767 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,364 |
| webhookie-allwebhookie | 0.1.2 | 1 of 3See more | 28,605 |
Container images carrying it
10 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hookiesolutions/ | 0629694246ba | swagger-ui | 4.1.3 | 2 |
| apachepinot/ | 0018bb04ced7 | swagger-ui | 4.1.3 | 1 |
| audig/ | 2c3fe34ee430 | swagger-ui | 4.1.3 | 1 |
| dniel/ | 45a667852f2a | swagger-ui | 4.1.3 | 1 |
| eikek0/ | 661ff3ef42cd | swagger-ui | 4.1.3 | 1 |
| fimperato/ | 604012b77841 | swagger-ui | 4.1.3 | 1 |
| gotson/ | 9b15ea6bfc30 | swagger-ui | 4.1.3 | 1 |
| openkm/ | 3bc465a7461b | swagger-ui | 4.1.3 | 1 |
| someblackmagic/ | 0d63ba37a560 | swagger-ui | 4.1.3 | 1 |
| trinodb/ | ee80ab5eeab2 | swagger-ui | 4.1.3 | 1 |