CVE-2026-82731 Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection

🗓️ 01 Sep 2026 02:09:38Reported by GoogleType

osv🔗 osv.dev👁 1 Views

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ash-project ash_typescript allows an attacker who controls a path-parameter value to redirect a generated client's request, and the credentials attached to it, to an unintended r...

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2026-82731	1 Sep 202602:09	–	cve
Cvelist	CVE-2026-82731 Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection	1 Sep 202602:09	–	cvelist
EUVD	EUVD-2026-68930	1 Sep 202602:09	–	euvd
NVD	CVE-2026-82731	1 Sep 202603:16	–	nvd
OSV	EEF-CVE-2026-82731 Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection	1 Sep 202602:09	–	osv
Positive Technologies	PT-2026-84079	1 Sep 202600:00	–	ptsecurity

Source	Link
cna	www.cna.erlef.org/cves/CVE-2026-82731.html
github	www.github.com/
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82731.json
github	www.github.com/ash-project/ash_typescript
github	www.github.com/ash-project/ash_typescript/commit/5165f752f5f92b755d946f2d1ce750ff69083ffc
github	www.github.com/ash-project/ash_typescript/security/advisories/GHSA-6g23-p936-fm2f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-82731
osv	www.osv.dev/vulnerability/EEF-CVE-2026-82731
repo	www.repo.hex.pm/

01 Sep 2026 11:45Current

5.9Medium risk

Vulners AI Score5.9

CVSS 42.3