arjun-g / vs-swagger-viewer

Swagger Viewer lets you preview and validate Swagger 2.0 and OpenAPI files as you type in Visual Studio Code.
MIT License
169 stars 47 forks source link

Security issue in Swagger-UI #111

Open DanCarterGMSL opened 2 years ago

DanCarterGMSL commented 2 years ago

There's a security vulnerability in the version of Swagger-UI used by Swagger Viewer for VSCode.

https://portswigger.net/daily-swig/widespread-swagger-ui-library-vulnerability-leads-to-dom-xss-attacks

I don't know whether this affects Swagger Viewer or not, but thought it was worth pointing out!