Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Openapi-python-client Project Clear all filters
TI-2020-11914 CVE-2020-15141 · GHSA-7wgr-7666-7pwj

Path Traversal in openapi-python-client

Priority LOW 22

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability.

CVSS 3.1MEDIUM 4.1 Network Low privileges User interaction EPSS 0.01137 Published 2020-08-14 Fixed in 0.5.3 CWE-22
TI-2020-11915 CVE-2020-15142 · GHSA-9x4c-63pf-525f

Arbitrary Code Generation

Priority MEDIUM 43

In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01849 Published 2020-08-14 Fixed in 0.5.3 CWE-94