OpenAPITools / OpenAPITools/openapi-generator
[BUG] openapi-generator/modules/openapi-generator/src/main/resources/htmlDocs2 /js_jquery.mustache contains vulnerable jQuery version
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 26.8k
- Forks
- 7.7k
- PR merge metrics
- PR metrics pending
Description
Description
The mustache template https://github.com/OpenAPITools/openapi-generator/blob/master/modules/openapi-generator/src/main/resources/htmlDocs2/js_jquery.mustache contains a jQuery Version with known vulnerabilities (v3.1.0). See for example https://security.snyk.io/package/npm/jquery
openapi-generator version
7.3.0
OpenAPI declaration file content or url
not applicable
Generation Details
not applicable
Steps to reproduce
- Open https://github.com/OpenAPITools/openapi-generator/blob/master/modules/openapi-generator/src/main/resources/htmlDocs2/js_jquery.mustache
- Note that it uses jQuery version 3.1.0
- Open a website that documents vulnerabilities of jQuery versions, such as for example https://security.snyk.io/package/npm/jquery
- Note that jQuery version contains several known vulnerabilities
Related issues/PRs
https://github.com/OpenAPITools/openapi-generator/issues/16063
https://github.com/OpenAPITools/openapi-generator/pull/17930
Suggest a fix
Update this template to use a newer jQuery version.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with openapi-generator/src/main/resources/htmlDocs2/js_jquery.mustache and inspect the jQuery version reference against the vulnerability information linked in the issue. Done means the template uses a newer supported version and generated HTML documentation no longer includes the vulnerable version; review related issue 16063 and PR 17930 first.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- jquery
- Domain
- documentation, security
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100