From a5e8b23d9df7160f139c4191a867b0c5f3b770e8 Mon Sep 17 00:00:00 2001
From: Holger Brandhorst <holger.brandhorst@synaos.com>
Date: Sat, 5 Sep 2026 21:23:31 +0200
Subject: [PATCH] Fix CVE-2026-75838

---
 CHANGELOG.md | 1 +
 pom.xml      | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0d108be54..8d345de0d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add `springdoc.ai.mcp.audit.redact` (default `true`) to mask secrets in MCP audit events
 - Document that the MCP approval flow is a confirmation step, not an authorization control
 - Document the security policy and the release versioning scheme
+- Upgrade swagger-ui to version **5.32.14**
 
 ## [3.1.0] - 2026-07-31
 
diff --git a/pom.xml b/pom.xml
index 14f6b435c..55b2a8bb3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -60,7 +60,7 @@
 		</central-publishing-maven-plugin.version>
 		<flatten-maven-plugin.version>1.5.0</flatten-maven-plugin.version>
 		<swagger-api.version>2.2.52</swagger-api.version>
-		<swagger-ui.version>5.32.11</swagger-ui.version>
+		<swagger-ui.version>5.32.14</swagger-ui.version>
 		<gmavenplus-plugin.version>1.13.1</gmavenplus-plugin.version>
 		<jjwt.version>0.9.1</jjwt.version>
 		<therapi-runtime-javadoc.version>0.15.0</therapi-runtime-javadoc.version>