search

Surnet / swagger-jsdoc

Generates swagger/openapi specification based on jsDoc comments and YAML files.
MIT License
1.69k stars 228 forks source link

Upgrade swagger-parser to fix vulnerability #333

Closed Haegin closed 1 year ago

Haegin commented 1 year ago

Fixes Vulnerability with dependency swagger-parser v10.0.2 #287.

swagger-parser depends on z-schema, which depends on validator, and the version that swagger-parser v10.0.2 depends on has a security vulnerability (https://github.com/advisories/GHSA-xx4c-jj58-r7x6).

PR #300 tried to fix this, but because the version is pinned to 10.0.2 exactly in package.json it hasn't changed the version used.

stale[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.