Swagger's code generators and parsers forgot the core tenet of software development, which is never to trust user input The popular open source API framework Swagger lets developers describe, produce, ...
Researchers at Rapid7 found a vulnerability in the Swagger Code Generator that could execute arbitrary code embedded in a Swagger document. An unexpected behavior in a relatively new and popular open ...