Cross-Site Scripting in swagger-ui

Versions of swagger-ui prior to 2.2.1 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize JSON schemas, allowing attackers to execute arbitrary JavaScript using tags in the method descriptions. Recommendation Upgrade to version 2.2.1 or later...

PT-2020-21525

Name of the Vulnerable Software and Affected Versions swagger-ui versions prior to 2.2.1 Description The issue is related to Cross-Site Scripting XSS due to the failure to sanitize JSON schemas. This allows attackers to execute arbitrary JavaScript using tags in method descriptions. Recommendatio...