diff --git a/.changeset/tender-weeks-help.md b/.changeset/tender-weeks-help.md
new file mode 100644
index 0000000000..c1e0e99945
--- /dev/null
+++ b/.changeset/tender-weeks-help.md
@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-api-docs': patch
+---
+
+Updated `swagger-ui-react` to 4.11.1 in order to address a [XSS
+vulnerability](https://github.com/advisories/GHSA-hqq7-2q2v-82xq) in `@braintree/sanitize-url`
diff --git a/plugins/api-docs/package.json b/plugins/api-docs/package.json
index e544c2812e..4878d4d7cd 100644
--- a/plugins/api-docs/package.json
+++ b/plugins/api-docs/package.json
@@ -50,7 +50,7 @@
     "react-router": "6.0.0-beta.0",
     "react-router-dom": "6.0.0-beta.0",
     "react-use": "^17.2.4",
-    "swagger-ui-react": "^4.1.3"
+    "swagger-ui-react": "^4.11.1"
   },
   "peerDependencies": {
     "@types/react": "^16.13.1 || ^17.0.0",
diff --git a/yarn.lock b/yarn.lock
index c13e1ba766..069500db2c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -24157,7 +24157,7 @@ swagger-client@^3.18.5:
     traverse "~0.6.6"
     url "~0.11.0"
 
-swagger-ui-react@^4.1.3:
+swagger-ui-react@^4.11.1:
   version "4.12.0"
   resolved "https://registry.npmjs.org/swagger-ui-react/-/swagger-ui-react-4.12.0.tgz#bfdf67bd0679fdd62ec3fb98bd827afb81fb7fe6"
   integrity sha512-pkSkUe4WVb7omoScK8GG2qgD6LxwZEIA+fKcxeACC7PCW52vFEjle6WO6lFOLj1JmfWriL7Ngi0+wJtVjfhnWw==