Fixing Swagger 2.1.36 CVE

[ricardozanini]

A few libraries from Swagger has CVEs and the upstream project has not upgraded yet. Once they do, we can remove the forced deps.

[fjtirado]

I now wondering if we should use swagger to parse the open api file at all (rhino?)

[ricardozanini]

I now wondering if we should use swagger to parse the open api file at all (rhino?)

I was wondering the same. This thing brings A LOT OF dependencies. It's insane. Wondering if just jackson would do.

[fjtirado]

Maybe we should try this one https://github.com/openapi-processor/openapi-parser/tree/master/openapi-parser, but it does not cover openapi 2.0 files.
We can use plain jackson, but we will need to generate the POJOS from the 2.0 and 3.0 schema.