WS-2019-0172

swagger-ui before 3.20.9 fails to sanitize URLs used in the OAuth auth flow, which may allow attackers to execute arbitrary JavaScript. that leads to Cross-Site Scripting...

PT-2020-21012

Name of the Vulnerable Software and Affected Versions swagger-ui versions prior to 3.20.9 Description The issue is related to Cross-Site Scripting XSS due to the failure to sanitize URLs used in the OAuth auth flow, which may allow attackers to execute arbitrary JavaScript. Recommendations Upgrad...