Skip to content

[Security Report] - Vulnerability Disclosure Notification – swagger-parser Library #2206

@rootxjs

Description

@rootxjs

Hi Team @frantuma @CalemRoelofsSB

I've identified a medium/high severity security vulnerability in the swagger-parser Java library that affects all current versions, including the latest (2.1.30 as of June 2025).

A detailed report, along with a working proof of concept and recommended mitigations, has been sent to your security contact email at:
📧 security@swagger.io

Kindly confirm receipt of the disclosure when convenient. I am happy to assist with verification, testing, or coordinated disclosure if needed.

Thank you!

Best regards,
Jeya Seelan S
🔐 Security Researcher
🌐 https://rootxjs.github.io/

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions