Skip to content
OpenAdvisories

Product · ferdikoomen

openapi-typescript-codegen

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-108551 Public exploit

    openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

    openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a s…