Veille CVE

Recherche « ferdikoomen openapi-typescript-codegen »

1 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « ferdikoomen openapi-typescript-codegen » ✕
  1. CVE-2026-108551 9.8 Critique

    ferdikoomen openapi-typescript-codegen

    openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter names, servers[0].url, or info.version to execute arbitrary JavaScript when generated clients are imported or service methods called.