TI-2026-70550 CVE-2026-108551 · GHSA-3pr5-x7xf-mg4g
Code injection in openapi-typescript-codegen via OpenAPI documents
Priority MEDIUM 48
openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted s…