All the vulnerabilities related to the version 2.0.0 of the package
Default swagger-ui configuration exposes all files in the module
The default configuration of @fastify/swagger-ui
without baseDir
set will lead to all files in the module's directory being exposed via http routes served by the module.
Update to v2.1.0
Use the baseDir
option