Hi,

Our security team has found vulnerabilities in handlebars.js version 2.0.0 
which is being used by Swagger UI.
References provided:
https://yahoo-security.tumblr.com/post/128130790295/paranoid-labs-open-source-and-solving-xss-in
https://github.com/wycats/handlebars.js/pull/1083 
https://blog.srcclr.com/handlebars_vulnerability_research_findings/

Is it already a known issue and being taken care to upgrade to 
handlebars.js latest stable version ?

Thanks,
Vijay

-- 
You received this message because you are subscribed to the Google Groups 
"Swagger" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to