Oapi-codegen vulnerabilities
We track 2 vulnerabilities in Oapi-codegen products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Oapi-codegen vulnerabilities
- 8.8 High severity
oapi-codegen: Improper Control of Generation of Code
oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that
- 7.5 High severity
oapi-codegen: Improper Control of Generation of Code
oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers[].x-go-name value emitted unescaped by the server-urls template. Attackers who control an OpenAPI document can define