Skip to content
OpenAdvisories

Product · acacode

swagger-typescript-api

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-54663

    swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`

    swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves external $ref URLs and fetchRemoteSchemaDocument uses isHttpUrl to fetch any http o…

    acacode swagger-typescript-api swagger-typescript-api npm