yapi-vendor@1.10.2 vulnerabilities

YAPI

Known vulnerabilities in the yapi-vendor package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Cross-site Scripting yapi-vendor is a YAPI Affected versions of this package are vulnerable to Cross-site Scripting due to the `Advanced Expectation - Response` module. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the `body` field. How to fix Cross-site Scripting? There is no fixed version for `yapi-vendor`.	*
M Cross-site Scripting (XSS) yapi-vendor is a YAPI Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the remark module on the `/interface/api` edit page. Note: CVE-2021-33237 is a duplicate of CVE-2021-36686. How to fix Cross-site Scripting (XSS)? There is no fixed version for `yapi-vendor`.	>=0.0.0