Skip to content
OpenAdvisories

Vendor

oapi-codegen

2 known vulnerabilities.

Products

oapi-codegen 2
All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2026-119028

    oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values

    oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry tha…

    oapi-codegen oapi-codegen
  • High 7.5
    CVE-2026-119027

    oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension

    oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers[].x-go-name value emitted unescaped by the server-urls template. Attackers who control an OpenAPI document can defin…

    oapi-codegen oapi-codegen