Surnet / swagger-jsdoc

Generates swagger/openapi specification based on jsDoc comments and YAML files.
MIT License
1.69k stars 228 forks source link

fix: validator security update #300

Closed superflyxxi closed 2 years ago

superflyxxi commented 2 years ago

The validator library has the below security issues. We need to upgrade to version 13.7.0 to resolve this. To do so, need to update swagger-parser to latest version and hence all its dependencies are also updated.

Normally dependabot would create a PR for this, but it seems swagger-jsdoc is very far behind in a lot of dependencies and it may take a while before dependabot gets to this specific dependency. Creating this PR to at least avoid this security issue.

This commit was created by running yarn upgrade swagger-parser.