Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b1b486095842ac896e4ae9b4622d4ce0979b9e427
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
PATCH /prism/document/{documentId}/mergedata/refresh
POST /prism/document/{documentId}/generate
POST /prism/document/{documentId}/generate/pdf
POST /prism/document/{documentId}/generate/uploadFile
POST /prism/document/{documentId}/mergedata/generate
POST /prism/pdfUpload/generate/pdf
POST /prism/template/{templateId}/generate/pdf
POST /prism/template/{templateId}/publish
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b1b486095842ac896e4ae9b4622d4ce0979b9e427
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
PATCH /prism/document/{documentId}/mergedata/refresh
POST /prism/document/{documentId}/generate
POST /prism/document/{documentId}/generate/pdf
POST /prism/document/{documentId}/generate/uploadFile
POST /prism/document/{documentId}/mergedata/generate
POST /prism/pdfUpload/generate/pdf
POST /prism/template/{templateId}/generate/pdf
POST /prism/template/{templateId}/publish
Open service 3.33.241.96:443 · prism.api.test.sdocs.com
2026-01-09 20:53
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Fri, 09 Jan 2026 20:53:07 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BoqU81mFAjtDZFjRQ%2FyAJfHyi%2BMsuE3SD327kDzq2GY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767991987"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BoqU81mFAjtDZFjRQ%2FyAJfHyi%2BMsuE3SD327kDzq2GY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767991987"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1767991987966,"status":500,"error":"Internal Server Error","path":"/"}
Open service 15.197.149.68:80 · prism.api.test.sdocs.com
2026-01-09 06:43
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Fri, 09 Jan 2026 06:44:41 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2vmRHLM%2FMjMjj%2FDnih%2FTT5V4dYRdKOYRQHw6AUHRrBw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767941081"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2vmRHLM%2FMjMjj%2FDnih%2FTT5V4dYRdKOYRQHw6AUHRrBw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767941081"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1767941081193,"status":500,"error":"Internal Server Error","path":"/"}
Open service 3.33.241.96:443 · prism.api.test.sdocs.com
2026-01-03 00:10
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Sat, 03 Jan 2026 00:10:49 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6y9LFqUAooXE2%2B%2FEjnpaKkGPFhtiU5pbPQP7eSRmMog%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767399050"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6y9LFqUAooXE2%2B%2FEjnpaKkGPFhtiU5pbPQP7eSRmMog%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767399050"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1767399050120,"status":500,"error":"Internal Server Error","path":"/"}
Open service 15.197.149.68:80 · prism.api.test.sdocs.com
2026-01-02 02:36
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Fri, 02 Jan 2026 02:36:36 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6LNTWDlw1BxkAZ5ZWTmhd1VHFbudHDeX%2BFl6sYfIbtU%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767321397"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6LNTWDlw1BxkAZ5ZWTmhd1VHFbudHDeX%2BFl6sYfIbtU%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767321397"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1767321397351,"status":500,"error":"Internal Server Error","path":"/"}
Open service 15.197.149.68:80 · prism.api.test.sdocs.com
2025-12-23 07:44
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Tue, 23 Dec 2025 07:44:21 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=UYMGVPis%2FAljS0E0xX5%2FJaEX8srxwCDMM6ZGNaM3cJ8%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766475861"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=UYMGVPis%2FAljS0E0xX5%2FJaEX8srxwCDMM6ZGNaM3cJ8%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766475861"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1766475861496,"status":500,"error":"Internal Server Error","path":"/"}
Open service 3.33.241.96:443 · prism.api.test.sdocs.com
2025-12-22 10:42
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Mon, 22 Dec 2025 10:42:38 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9TSUZ584%2F%2BXln5dXTW6d86VwwoXfsTPH40sDQGxFpEg%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766400158"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9TSUZ584%2F%2BXln5dXTW6d86VwwoXfsTPH40sDQGxFpEg%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766400158"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1766400158402,"status":500,"error":"Internal Server Error","path":"/"}
Open service 3.33.241.96:443 · prism.api.test.sdocs.com
2025-12-21 10:53
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Sun, 21 Dec 2025 10:53:11 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RGZYKhu%2FrqoTK98rs%2B8hhLn7y3YoaCTDIP0Am7nw3kg%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766314392"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=RGZYKhu%2FrqoTK98rs%2B8hhLn7y3YoaCTDIP0Am7nw3kg%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766314392"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1766314392086,"status":500,"error":"Internal Server Error","path":"/"}
Open service 15.197.149.68:80 · prism.api.test.sdocs.com
2025-12-20 23:19
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Sat, 20 Dec 2025 23:19:13 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tDNGRFzQ8y9mkAhRJ8yGXHrUffDqEVMA7KCCmVrHUUQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766272753"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tDNGRFzQ8y9mkAhRJ8yGXHrUffDqEVMA7KCCmVrHUUQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766272753"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1766272753381,"status":500,"error":"Internal Server Error","path":"/"}
Open service 3.33.241.96:443 · prism.api.test.sdocs.com
2025-12-19 08:35
HTTP/1.1 500 Internal Server Error
Content-Type: application/json
Date: Fri, 19 Dec 2025 08:35:22 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=KN3pKpXlpZs6MMFdf2XHES2xgHK7pL%2F6bolXLUTNmjI%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766133322"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=KN3pKpXlpZs6MMFdf2XHES2xgHK7pL%2F6bolXLUTNmjI%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766133322"
Server: Heroku
Via: 1.1 heroku-router
Content-Length: 83
Connection: close
{"timestamp":1766133322309,"status":500,"error":"Internal Server Error","path":"/"}