Flask-APISpec installs an npm package called swagger-ui-dist.
It's found at .../site-packages/flask__apispec/static after a pip install of Flask-APISpec.

The version of swagger-ui-dist is outdated and has security vulnerabilities in it. Can swagger-ui-dist be updated to the latest version, please?