Skip to content
OpenAdvisories

Package · Go

github.com/oapi-codegen/oapi-codegen

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • None 0.0
    GHSA-rjwr-m7qx-3fjr

    oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code

    ## Summary The vulnerability in oapi-codegen seems to be similar with CVE-2026-22785, which is a generated-code injection issue where untrusted OpenAPI `summary` text is embedded into generated TypeScript MCP server source without proper escaping. `oapi-codeg…

    github.com/oapi-codegen/oapi-codegen github.com/oapi-codegen/oapi-codegen/v2 Go