Skip to content
OpenAdvisories

Vendor

Redocly

2 known vulnerabilities.

Products

redocly-cli 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2026-63225

    Redocly CLI: Path traversal when using `split` command

    Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the split command constructs output paths under --outDir from untrusted OpenAPI or AsyncAPI component names and x-codeSamples lang values without …

    Redocly redocly-cli @redocly/cli npm