openapi-typescript-codegen vulnerabilities

1 known vulnerability in openapi-typescript-codegen from Ferdikoomen. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  openapi-typescript-codegen: Improper Control of Generation of Code

  CVE-2026-108551Oct 10, 2026Ferdikoomen

  openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a si