Vulnerabilities

TI-2026-39492 CVE-2026-54666 · GHSA-w284-33mx-6g9v

swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies

HIGH 71

swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00359 Published 2026-07-29 Fixed in 13.12.2 CWE-1336

TI-2026-39490 CVE-2026-54664 · GHSA-5f94-x226-ccpm

HIGH 71

swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00477 Published 2026-07-29 Fixed in 13.12.2 CWE-1336

TI-2026-39487 CVE-2026-54661 · GHSA-38c3-wv3c-v3xj

LOW 39

swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00477 Published 2026-07-29 Fixed in 13.12.2 CWE-1336

TI-2026-39489 CVE-2026-54663 · GHSA-x36r-4347-pm5x

MEDIUM 60

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00222 Published 2026-07-29 Fixed in 13.12.2 CWE-20

TI-2026-39488 CVE-2026-54662 · GHSA-hqj5-cw9f-rx67

HIGH 71

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00347 Published 2026-07-29 Fixed in 13.12.2 CWE-1336

TI-2026-39486 CVE-2026-54660 · GHSA-h754-fxp7-88wx

HIGH 66

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00309 Published 2026-07-29 Fixed in 13.12.2 CWE-200