QID 570057
QID 570057: Detected Presence of oneOf in OpenAPI 2.0
The keyword oneOf was introduced with OpenAPI 3.0. Analysis of the OpenAPI 2.0 file resulted in detecting presence of anyOf keyword.
Presence of oneOf on OpenAPI 2.0 makes the swagger not compatible and results in a warning. This keyword should only be used with OpenAPI 3.0. If oneOf is present the application should have logic to be able to process the different types of objects that are defined in this object.
Solution
In general avoid using oneOf. If you plan to support oneOf ensure you are using OpenAPI 3.0.
Vendor References
CVEs related to QID 570057
Software Advisories
| Advisory ID | Software | Component | Link |
|---|