CVE-2016-5682by Jeremyin Security Bulletinson Posted on April 10, 2017 Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.