Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Open service 2.18.64.85:443 · dev-tab-backend.choreograph.com
2026-01-23 06:45
HTTP/1.1 404 Not Found
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/problem+json
Content-Length: 102
Expires: Fri, 23 Jan 2026 06:45:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 06:45:22 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=428
Server-Timing: origin; dur=75
Server-Timing: ak_p; desc="1769150721726_34911125_49898927_50132_9303_143_258_-";dur=1
{"type":"about:blank","title":"Not Found","status":404,"detail":"No static resource .","instance":"/"}
Open service 2.18.64.85:443 · dev-tab-backend.choreograph.com
2026-01-10 01:55
HTTP/1.1 404 Not Found
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/problem+json
Content-Length: 102
Expires: Sat, 10 Jan 2026 01:55:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 10 Jan 2026 01:55:15 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=81
Server-Timing: origin; dur=64
Server-Timing: ak_p; desc="1768010115782_34911109_323813193_14468_5006_0_5_-";dur=1
{"type":"about:blank","title":"Not Found","status":404,"detail":"No static resource .","instance":"/"}
Open service 2.18.64.85:443 · dev-tab-backend.choreograph.com
2026-01-03 00:11
HTTP/1.1 404 Not Found
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/problem+json
Content-Length: 102
Expires: Sat, 03 Jan 2026 00:11:59 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 03 Jan 2026 00:11:59 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=90
Server-Timing: origin; dur=69
Server-Timing: ak_p; desc="1767399119788_34911125_332542207_15882_5513_0_2_-";dur=1
{"type":"about:blank","title":"Not Found","status":404,"detail":"No static resource .","instance":"/"}
Open service 2.18.64.85:443 · dev-tab-backend.choreograph.com
2025-12-23 03:27
HTTP/1.1 404 Not Found
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/problem+json
Content-Length: 102
Expires: Tue, 23 Dec 2025 03:27:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 23 Dec 2025 03:27:29 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=82
Server-Timing: origin; dur=63
Server-Timing: ak_p; desc="1766460449720_34911125_141559604_14460_4218_91_93_-";dur=1
{"type":"about:blank","title":"Not Found","status":404,"detail":"No static resource .","instance":"/"}