VYPR

openapi-typescript-codegen

by Ferdikoomen

CVEs (1)

  • CVE-2026-108551CriOct 10, 2026
    risk 0.64cvss 9.8epss —

    openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path…