2 matches found
CVE-2016-1000229
swagger-ui has XSS in key names
CVE-2016-5682
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.