Skip to content
OpenAdvisories

Package · npm

@typespec/spector

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-7q9c-hpx7-9cwm

    TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop

    ### Summary `@typespec/spector` registers a `POST /.admin/stop` HTTP route with no authentication, authorization token, Origin check, or IP-source restriction. Any network-reachable client can send a single unauthenticated POST request to terminate the mock s…

    @typespec/spector npm