HIGH8.3npm
GHSA-38c3-wv3c-v3xj· CVE-2026-54661swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
Modified: 7/29/2026
package
npm/swagger-typescript-api
pkg:npm/swagger-typescript-api
HIGH8.3npm
GHSA-5f94-x226-ccpm· CVE-2026-54664swagger-typescript-api vulnerable to code injection via unescaped enum string values
Modified: 7/29/2026
HIGH7.4npm
GHSA-h754-fxp7-88wx· CVE-2026-54660swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
Modified: 7/29/2026
HIGH8.3npm
GHSA-hqj5-cw9f-rx67· CVE-2026-54662swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
Modified: 8/13/2026
HIGH8.3npm
GHSA-w284-33mx-6g9v· CVE-2026-54666swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
Modified: 7/29/2026
MEDIUM6.1npm
GHSA-x36r-4347-pm5x· CVE-2026-54663swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
Modified: 7/29/2026