Arbitrary Code Execution

swagger-parser is susceptible to arbitrary code execution attacks. It does not use a safe parsing method in both the readYamlTree() and readYamlValue() functions of swagger-parser, allowing malicious YAML files from untrusted remote sources to be parsed to the applications. All the online code generators and validators using this parser will be affected.