Acacode vulnerabilities
We track 5 vulnerabilities in Acacode products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.
Latest Acacode vulnerabilities
- 8.3 High severity
swagger-typescript-api: Improper Neutralization of Special Elements in Output Used by a Downstream Component
swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-routes/schema-routes.ts passes OpenAPI path keys through parseRouteName to templates/default/procedure-call.ejs and templates/modular/pr
- 8.3 High severity
swagger-typescript-api: Improper Neutralization of Special Elements in Output Used by a Downstream Component
swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas.*.enum[i] values to Ts.StringValue in src/configuration.ts without escaping
- 8.3 High severity
swagger-typescript-api: Improper Neutralization of Special Elements in Output Used by a Downstream Component
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/code-gen-process.ts createApiConfig copies servers[0].url into apiConfig.baseUrl, and templates/base/http-clients/fetch-http-client.ejs interpola
- 8.3 High severity
swagger-typescript-api: Improper Neutralization of Special Elements in Output Used by a Downstream Component
swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, templates/base/http-clients/axios-http-client.ejs interpolates servers[0].url from src/code-gen-process.ts into the HttpClient constructor without
- 7.4 High severity
swagger-typescript-api: Exposure of Sensitive Information to an Unauthorized Actor
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts getRemoteRequestHeaders forwards --authorizationToken to every URL fetched by fetchRemoteSchemaDocument while warmUpRe