acacode/swagger-typescript-api Security Advisories | GitStock

high2026-07-29

swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies

GHSA-w284-33mx-6g9v · CVE-2026-54666

high2026-07-29

swagger-typescript-api vulnerable to code injection via unescaped enum string values

GHSA-5f94-x226-ccpm · CVE-2026-54664

high2026-07-29

swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template

GHSA-38c3-wv3c-v3xj · CVE-2026-54661

medium2026-07-29

swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`

GHSA-x36r-4347-pm5x · CVE-2026-54663

high2026-07-29

swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template

GHSA-hqj5-cw9f-rx67 · CVE-2026-54662

high2026-07-29

swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`

GHSA-h754-fxp7-88wx · CVE-2026-54660