Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the OpenAPI module's Swagger UI page, which writes a value derived from the request's Host header into an inline script block without encoding or validation. Because URI.create does not neutralize a maliciou...