The default configuration of @fastify/swagger-ui
without baseDir
set will lead to all files in the module's directory being exposed via http routes served by the module.
Update to v2.1.0
Use the baseDir
option
{ "nvd_published_at": "2024-01-15T16:15:13Z", "cwe_ids": [ "CWE-1188" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-01-16T15:24:41Z" }