This module pulls in @apidevtools/json-schema-ref-parser@14.0.1
|
"@apidevtools/json-schema-ref-parser": "14.0.1", |
That version is vulnerable to https://nvd.nist.gov/vuln/detail/CVE-2026-15195. https://github.com/APIDevTools/json-schema-ref-parser/releases/tag/v15.3.6 and APIDevTools/json-schema-ref-parser#421 suggest this is fixed in @apidevtools/json-schema-ref-parser@15.3.6 and comparing the code fix with v14 and older versions, the vulnerability is only fixed in v15
Can @apidevtools/swagger-parser be updated to pull in @apidevtools/json-schema-ref-parser@15.3.6 or newer
This module pulls in
@apidevtools/json-schema-ref-parser@14.0.1swagger-parser/package.json
Line 77 in 8dcd391
That version is vulnerable to https://nvd.nist.gov/vuln/detail/CVE-2026-15195. https://github.com/APIDevTools/json-schema-ref-parser/releases/tag/v15.3.6 and APIDevTools/json-schema-ref-parser#421 suggest this is fixed in
@apidevtools/json-schema-ref-parser@15.3.6and comparing the code fix with v14 and older versions, the vulnerability is only fixed in v15Can
@apidevtools/swagger-parserbe updated to pull in@apidevtools/json-schema-ref-parser@15.3.6or newer