All products

swagger-typescript-api

npm · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client templateCVE-2026-54662 · GHSA-HQJ5-CW9F-RX67 swagger-typescript-api npm High Fix reported
swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodiesCVE-2026-54666 · GHSA-W284-33MX-6G9V swagger-typescript-api npm High Fix reported
swagger-typescript-api vulnerable to code injection via unescaped enum string valuesCVE-2026-54664 · GHSA-5F94-X226-CCPM swagger-typescript-api npm High Fix reported
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client templateCVE-2026-54661 · GHSA-38C3-WV3C-V3XJ swagger-typescript-api npm High Fix reported
swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`CVE-2026-54663 · GHSA-X36R-4347-PM5X swagger-typescript-api npm Medium Fix reported
swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`CVE-2026-54660 · GHSA-H754-FXP7-88WX swagger-typescript-api npm High Fix reported