Security Test: Invalid references¶

Description¶

Default Severity: info

Invalid references occur when a system points to components that don't actually exist. This usually happens when you're expecting everything to be defined in one file, but then you end up with a pointer to something missing, causing errors or unexpected behavior when the system tries to use it. The real risk is that if these broken references aren’t caught, your application might crash or behave unpredictably, potentially opening up opportunities for attackers to exploit the error conditions. Developers commonly overlook validating references or assume they're all correctly defined, which can lead to security and stability issues down the line.

Reference:

• https://swagger.io/specification/#relative-references-in-uris

Configuration¶

Identifier: schema/invalid_refs

Examples¶

All configuration available:

checks:
  schema/invalid_refs:
    skip: false # default

Compliance and Standards¶