[Snyk] Upgrade swagger-ui-express from 4.1.6 to 4.6.3

[seansund]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade swagger-ui-express from 4.1.6 to 4.6.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 7 months ago, on 2023-05-05.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIDIST-2314884	656/1000 Why? Mature exploit, Has a fix available, CVSS 5.4	Mature
	Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIDIST-6056393	656/1000 Why? Mature exploit, Has a fix available, CVSS 5.4	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: swagger-ui-express

• 4.6.3 - 2023-05-05
  

  Support for Express 5

• 4.6.2 - 2023-02-27
  

  4.6.2

• 4.6.1 - 2023-02-18
  No content.
• 4.6.0 - 2022-11-07
  

  Accept array of external JS/CSS assets

• 4.5.0 - 2022-07-13
  No content.
• 4.4.0 - 2022-05-13
  

  4.4.0

• 4.3.0 - 2021-12-16
  No content.
• 4.2.0 - 2021-12-01
  No content.
• 4.1.6 - 2020-12-22
  

  Multiple version example

from swagger-ui-express GitHub release notes

Commit messages

Package name: swagger-ui-express

• 320ef0d Merge branch 'master' of github.com:scottie1984/swagger-ui-express
• afbc6ae bump version
• c046dba Merge pull request #342 from aldenquimby/master
• 485ad2e Allow express 5-beta. Fixes #341
• 5cca5de bump version
• 78c4180 Merge pull request #336 from chgeo/master
• 462cd4f Enhance docs
• 0f37a59 Fix `serveFiles` to work w/ dynamic swaggerDoc
• 7d88de3 Do not execute `run.js` in tests
• 98f8eb3 Bump version
• 24b5260 Updated run command
• a23ce2f Merge pull request #327 from alexmassy/master
• 2857c3e Merge pull request #332 from wjthieme/master
• 53eb199 Custom robots meta tag
• 7e3eb04 unit tests for new feature
• 8e7ec69 Merge pull request #326 from camipozas/docs/replace-yamljs-to-yaml
• 242bcd5 replace npm i to npm install
• 7371252 replace yamljs to yaml
• 3b9b19c attempt preauthorization several times (useful when definition is loaded via swaggerOptions url)
• 6815803 add support for preauthorizeBasic method
• eff9a0c Merge pull request #321 from Luku1806/feature/multiple-script-imports
• 8debb7a Add documentation for array parameters
• b284ee5 Merge pull request #313 from JuninhoFreitas/feature/route-examples
• 24381a0 Bump version

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs