Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e52cad916cd99cb1404ecfa61b43d4ba117f3d9f9f
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
GET /api/v1.0/skyjo/games/open
GET /api/v1.0/skyjo/games/{id}
GET /api/v1.0/skyjo/games/{id}/lobby/sse
GET /api/v1.0/skyjo/games/{id}/sse
GET /api/v1.0/skyjo/statistics
POST /api/v1.0/skyjo/games
POST /api/v1.0/skyjo/games/{id}/card
POST /api/v1.0/skyjo/games/{id}/deal
POST /api/v1.0/skyjo/games/{id}/deck
POST /api/v1.0/skyjo/games/{id}/discard
POST /api/v1.0/skyjo/games/{id}/discard-pile
POST /api/v1.0/skyjo/games/{id}/players
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e52cad916cd99cb1404ecfa61b43d4ba117f3d9f9f
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
GET /api/v1.0/skyjo/games/open
GET /api/v1.0/skyjo/games/{id}
GET /api/v1.0/skyjo/games/{id}/lobby/sse
GET /api/v1.0/skyjo/games/{id}/sse
GET /api/v1.0/skyjo/statistics
POST /api/v1.0/skyjo/games
POST /api/v1.0/skyjo/games/{id}/card
POST /api/v1.0/skyjo/games/{id}/deal
POST /api/v1.0/skyjo/games/{id}/deck
POST /api/v1.0/skyjo/games/{id}/discard
POST /api/v1.0/skyjo/games/{id}/discard-pile
POST /api/v1.0/skyjo/games/{id}/players
Open service 99.83.185.157:443 · api.skyjo.tomiste.com
2026-01-09 14:54
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Fri, 09 Jan 2026 14:54:33 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=vEVX1HRLi1rFQMtjzKzPR53AZm6i6Pel6AmZq2Hgisw%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767970473"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=vEVX1HRLi1rFQMtjzKzPR53AZm6i6Pel6AmZq2Hgisw%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767970473"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 15.197.253.240:80 · api.skyjo.tomiste.com
2026-01-09 14:54
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Fri, 09 Jan 2026 14:55:34 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tP0eKo%2FNERMh38uIFFvOulR1LG9C4SiPrsMvX3DgE6M%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767970534"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tP0eKo%2FNERMh38uIFFvOulR1LG9C4SiPrsMvX3DgE6M%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767970534"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 99.83.185.157:443 · api.skyjo.tomiste.com
2026-01-02 23:37
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Fri, 02 Jan 2026 23:37:30 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NAlshUD3zvAFFvMaVHLoG%2BHGHsjy%2FMzsY9%2FOuoHkfB4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767397050"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NAlshUD3zvAFFvMaVHLoG%2BHGHsjy%2FMzsY9%2FOuoHkfB4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767397050"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 15.197.253.240:80 · api.skyjo.tomiste.com
2026-01-02 23:37
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Fri, 02 Jan 2026 23:37:33 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=O7s4Iyndfk%2Bfz5s%2BGHp7GQgSqyO9NNAxslDTCZnihvY%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767397052"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=O7s4Iyndfk%2Bfz5s%2BGHp7GQgSqyO9NNAxslDTCZnihvY%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767397052"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 99.83.185.157:80 · api.skyjo.tomiste.com
2026-01-01 00:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Thu, 01 Jan 2026 00:42:18 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jtsTjlwwN6zOmfe8PfV0oqz5JC%2BXW6DVdtWvD5QajOY%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767228138"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jtsTjlwwN6zOmfe8PfV0oqz5JC%2BXW6DVdtWvD5QajOY%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767228138"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 3.33.249.164:80 · api.skyjo.tomiste.com
2026-01-01 00:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Thu, 01 Jan 2026 00:42:18 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jtsTjlwwN6zOmfe8PfV0oqz5JC%2BXW6DVdtWvD5QajOY%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767228138"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jtsTjlwwN6zOmfe8PfV0oqz5JC%2BXW6DVdtWvD5QajOY%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767228138"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 15.197.253.240:443 · api.skyjo.tomiste.com
2026-01-01 00:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Thu, 01 Jan 2026 00:42:16 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=qkWnAMRbY4IIs8wN2h6E5gfLQxKigzvmJe0Io3NfuO8%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767228136"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=qkWnAMRbY4IIs8wN2h6E5gfLQxKigzvmJe0Io3NfuO8%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767228136"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 15.197.253.240:80 · api.skyjo.tomiste.com
2026-01-01 00:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Thu, 01 Jan 2026 00:42:18 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jtsTjlwwN6zOmfe8PfV0oqz5JC%2BXW6DVdtWvD5QajOY%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767228138"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jtsTjlwwN6zOmfe8PfV0oqz5JC%2BXW6DVdtWvD5QajOY%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767228138"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 52.223.53.203:443 · api.skyjo.tomiste.com
2026-01-01 00:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Thu, 01 Jan 2026 00:42:15 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9uR5%2F9iwImoxD1%2BtCo8kjf4OnOCttRzjf4GrX%2B6DuKg%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767228135"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9uR5%2F9iwImoxD1%2BtCo8kjf4OnOCttRzjf4GrX%2B6DuKg%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767228135"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 3.33.249.164:443 · api.skyjo.tomiste.com
2026-01-01 00:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Thu, 01 Jan 2026 00:42:15 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9uR5%2F9iwImoxD1%2BtCo8kjf4OnOCttRzjf4GrX%2B6DuKg%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767228135"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9uR5%2F9iwImoxD1%2BtCo8kjf4OnOCttRzjf4GrX%2B6DuKg%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767228135"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 99.83.185.157:443 · api.skyjo.tomiste.com
2026-01-01 00:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Thu, 01 Jan 2026 00:42:15 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9uR5%2F9iwImoxD1%2BtCo8kjf4OnOCttRzjf4GrX%2B6DuKg%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767228135"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9uR5%2F9iwImoxD1%2BtCo8kjf4OnOCttRzjf4GrX%2B6DuKg%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767228135"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 52.223.53.203:80 · api.skyjo.tomiste.com
2026-01-01 00:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Thu, 01 Jan 2026 00:42:18 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jtsTjlwwN6zOmfe8PfV0oqz5JC%2BXW6DVdtWvD5QajOY%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767228138"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jtsTjlwwN6zOmfe8PfV0oqz5JC%2BXW6DVdtWvD5QajOY%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767228138"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 15.197.253.240:80 · api.skyjo.tomiste.com
2025-12-22 16:36
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Mon, 22 Dec 2025 16:37:02 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=bKb6IdKCx2aRc1e3e2Iiq1hCGxd4Ssoih%2FzxRfm3r%2B4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766421422"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=bKb6IdKCx2aRc1e3e2Iiq1hCGxd4Ssoih%2FzxRfm3r%2B4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766421422"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 99.83.185.157:443 · api.skyjo.tomiste.com
2025-12-22 16:36
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Mon, 22 Dec 2025 16:36:59 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BJw8%2F2Nk0lby8F5js6Hd%2FSynzCTP%2B2jFSWvlKLpv3JI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766421419"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BJw8%2F2Nk0lby8F5js6Hd%2FSynzCTP%2B2jFSWvlKLpv3JI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766421419"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 99.83.185.157:443 · api.skyjo.tomiste.com
2025-12-20 18:05
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Sat, 20 Dec 2025 18:05:13 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Fu9h1T7GBZ0LmC%2FbWDXdw2fUPkpykRGvZKQ68M%2FnX6k%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766253913"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Fu9h1T7GBZ0LmC%2FbWDXdw2fUPkpykRGvZKQ68M%2FnX6k%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766253913"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}
Open service 15.197.253.240:80 · api.skyjo.tomiste.com
2025-12-20 18:05
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Sat, 20 Dec 2025 18:05:15 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=E7azTICg3%2BcuZB09%2Fp3RNSx%2FDturER7SkXRh0ld15Ms%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766253915"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=E7azTICg3%2BcuZB09%2Fp3RNSx%2FDturER7SkXRh0ld15Ms%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766253915"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
Content-Length: 34
Connection: close
{"message":"No static resource ."}