openapi-parser

openapi-parser !UPDATE This extension has been updated to use the latest Burp Montoya Java API. The extension has undergone a complete overhaul to improve both its UI/UX and performance. These changes ensure that the extension is modern and optimised for use. openapi-parser is a Burp Suite...

CVE-2026-72923

Microsoft.OpenApi.YamlReader (versions 2.0.0-preview.11 through 2.12.0 and 3.0.0 through 3.10.0) and Microsoft.OpenApi.Readers (prior to 1.6.30) are vulnerable to a denial of service via YAML alias expansion. The root cause lies in how SharpYaml represents aliases as shared nodes in a directed ac...

PortSwigger Web Security: Burp Suite OpenAPI Event Log HTML injection triggers Windows SMB authentication

A vulnerability was discovered in Burp Suite where attacker-controlled text from an OpenAPI parser exception was inserted into the Event log HTML without proper encoding. When a user invoked a specific save function and selected the resulting Event log entry, malicious HTML tags were interpreted ...