NPM: swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template

NPM: swagger-typescript-api vulnerable to code injection via unescaped servers0.url in fetch http-client template vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...

CVE-2026-54662 swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/code-gen-process.ts createApiConfig copies servers0.url into apiConfig.baseUrl, and templates/base/http-clients/fetch-http-client.ejs interpolates apiConfig.baseUrl into the generate...

EUVD-2026-50363

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/code-gen-process.ts createApiConfig copies servers0.url into apiConfig.baseUrl, and templates/base/http-clients/fetch-http-client.ejs interpolates apiConfig.baseUrl into the generate...

CVE-2026-13423

creationtimestamp| type| source ---|---|--- 2026-07-29 13:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrzxmig3523...

H2-database-CVE-2022-23221 — Updated!

H2 Database RCE CVE-2022-23221 whs41반고늘상@straightSang 1. Summary Reference: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 is a relational database management system that provides the ability to compile and execute Java code directly within the SQL engine. The H2 driver parses JDBC URLs to...

CVE-2019-13118

creationtimestamp| type| source ---|---|--- 2026-07-29 12:03:23+00:00| seen| https://t.me/linuxnews/592 2026-07-30 00:03:09+00:00| seen| https://t.me/linuxnews/592 2026-08-04 06:00:04+00:00| seen| https://t.me/linuxnews/592 2026-08-05 00:00:53+00:00| seen| https://t.me/linuxnews/592...

CVE-2021-34462

creationtimestamp| type| source ---|---|--- 2026-07-29 12:02:34+00:00| seen| https://t.me/reverseame/3088 2026-07-30 00:02:32+00:00| seen| https://t.me/reverseame/3088 2026-08-02 20:15:15+00:00| published-proof-of-concept| https://t.me/reverseame/3088 2026-08-03 01:11:29+00:00|...

CVE-2023-233397

creationtimestamp| type| source ---|---|--- 2026-07-29 12:02:22+00:00| seen| https://t.me/reverseame/4066 2026-07-30 00:02:24+00:00| seen| https://t.me/reverseame/4066 2026-08-02 10:04:23+00:00| published-proof-of-concept| https://t.me/reverseame/4066 2026-08-03 02:07:13+00:00|...

CVE-2026-58186

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrruw54hma23 2026-08-01 05:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryqt2qdmn2r...

CVE-2026-13110

creationtimestamp| type| source ---|---|--- 2026-07-29 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrrtoltjdn2c...

CVE-2026-11973

creationtimestamp| type| source ---|---|--- 2026-07-29 11:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrtjelgw42b...

CVE-2026-13425

creationtimestamp| type| source ---|---|--- 2026-07-29 11:36:38+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrrtj6pzpx23 2026-07-29 11:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrue7z7kt2b...

CVE-2026-58179

creationtimestamp| type| source ---|---|--- 2026-07-29 11:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrszuuitx2z 2026-07-30 09:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mru4hhitrt2s 2026-07-30 16:34:03+00:00| seen|...

CVE-2026-58153

creationtimestamp| type| source ---|---|--- 2026-07-29 11:22:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrspmxvxg2b...

CVE-2026-8791

The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bookingWebsiteUrl setting in all versions up to, and including, 1.0.17 due to a missing capability check on the setoptions AJAX action when the plugin is operating in agency mode. The...

CVE-2026-58181

The Apache Traffic Server urisigning and urlsig plugins can exhaust the stack or crash on attacker input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which...

CVE-2026-58178

The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

UBUNTU-CVE-2026-58181

The Apache Traffic Server urisigning and urlsig plugins can exhaust the stack or crash on attacker input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which...

CVE-2024-5300

creationtimestamp| type| source ---|---|--- 2026-07-29 10:00:08+00:00| seen| https://t.me/sysodmins/29465 2026-07-30 00:02:06+00:00| seen| https://t.me/sysodmins/29465...

CVE-2026-8791

The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bookingWebsiteUrl setting in all versions up to, and including, 1.0.17 due to a missing capability check on the setoptions AJAX action when the plugin is operating in agency mode. The...