-
-
Notifications
You must be signed in to change notification settings - Fork 6.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[BUG] openapi-generator uses outdated and vulnerable jQuery 1.8.3 #16063
Comments
For me, the generated html contains jQuery v3.1.0, but that, too is vulnerable. In fact, we just got a security requirement from a penetration test that we have to get rid of that dependency. It would be sad if that would mean we have to stop using the OpenAPI Generator. Is there a way to tell the generator to use a newer jQuery version? For reference, I found that jQuery v3.1.9 the file |
We are currently using openapi-generator (7.3.0) in one of our project as a maven dependency. In our ecosystem we have all the nexus tooling to check 3rd party dependency vulnerabilities. Currently due to this issue nexus-iq is failing our builds as jquery version used within the openapi-generator jar is deprecated. Hence would like to give a vote up towards this issue. Is there a schedule to fix this issue? It would be nice to know in this regards. |
Title: Update jQuery Version in OpenAPI Generator to Address Security Vulnerability Description: Steps to Reproduce:
Expected Behavior: Actual Behavior: Suggested Fix: Environment:
|
Bug Report Checklist
Description
openapi-generator uses outdated and vulnerable jQuery 1.8.3.
This version has vulnerabilities and hence, using it in the project fails the security checks.
openapi-generator version
6.6.0, 7.0.0-beta
Generation Details
jQuery-1.8.3.min.js is located in openapi-generator-6.6.0.jar/openapi-static/assets/js
Steps to reproduce
Add openapi-generator-6.6.0.jar to your Java project, and jQuery-1.8.3.min.js will be automatically loaded to your project
Related issues/PRs
swagger-api/swagger-ui#776
Suggest a fix
Upgrade jQuery to 2.2.3 at least or even newer version
The text was updated successfully, but these errors were encountered: