Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ricosuter/nswag

              master @ 2389c07
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Reflected XSS: 4 prior fixes. Scrutinize any change in this area.

NSwag.AspNetCore: most-fixed (4 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

DOM-based XSS: Insecure handling of the OAuth2 callback flow and window lifecycle state in oauth2-redirect.html allows malicious scripts to execute before the DOM is fully ready. Developers must ensure state parameters and ready states are validated before closing the window context.

Cross-Site Scripting (XSS): Outdated embedded static assets such as swagger-ui-bundle.js introduce known upstream scripting vulnerabilities that expose users hosting the UI endpoints to XSS.

JSON Injection: Using unsafe string replacement methods like Regex.Replace or string.Replace during document generation allows untrusted template variables to break out of JSON structures. Content must always be explicitly encoded using formal JSON serializers.