OpenAPITools / OpenAPITools/openapi-generator

[BUG] openapi-generator/modules/openapi-generator/src/main/resources/htmlDocs2 /js_jquery.mustache contains vulnerable jQuery version

Open
#17,928 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Issue: Bug
Dominant language
Java
Stars
26.8k
Forks
7.7k
PR merge metrics
PR metrics pending

Description

Description

The mustache template https://github.com/OpenAPITools/openapi-generator/blob/master/modules/openapi-generator/src/main/resources/htmlDocs2/js_jquery.mustache contains a jQuery Version with known vulnerabilities (v3.1.0). See for example https://security.snyk.io/package/npm/jquery

openapi-generator version

7.3.0

OpenAPI declaration file content or url

not applicable

Generation Details

not applicable

Steps to reproduce
  1. Open https://github.com/OpenAPITools/openapi-generator/blob/master/modules/openapi-generator/src/main/resources/htmlDocs2/js_jquery.mustache
  2. Note that it uses jQuery version 3.1.0
  3. Open a website that documents vulnerabilities of jQuery versions, such as for example https://security.snyk.io/package/npm/jquery
  4. Note that jQuery version contains several known vulnerabilities
Related issues/PRs

https://github.com/OpenAPITools/openapi-generator/issues/16063
https://github.com/OpenAPITools/openapi-generator/pull/17930

Suggest a fix

Update this template to use a newer jQuery version.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with openapi-generator/src/main/resources/htmlDocs2/js_jquery.mustache and inspect the jQuery version reference against the vulnerability information linked in the issue. Done means the template uses a newer supported version and generated HTML documentation no longer includes the vulnerable version; review related issue 16063 and PR 17930 first.

Written by the indexing model from the issue text.

Assessment

Tech stack
jquery
Domain
documentation, security
Issue type
Bug
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.