OAPI Codegen code injection vulnerability

Versions prior to 2.8.1 of oapi-codegen contain a code injection vulnerability. This vulnerability arises because the server-urls template fails to escape the servers.x-go-name value, allowing attackers to inject Go code. When the victim builds and imports the generated package, the injected func...

CVE-2026-119028: oapi-codegen: oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by…

oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that closes the const block in...

PT-2026-132101

oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers.x-go-name value emitted unescaped by the server-urls template. Attackers who control an OpenAPI document can define an injected func init that executes wh...

openapi-typescript-codegen 0.31.0 Code Injection

openapi-typescript-codegen version 0.31.0 contains a code injection vulnerability via unescaped OpenAPI specification values rendered into generated TypeScript clients. The proof of concept demonstrates benign import-time execution. https://packetstorm.news/download/237427...

Exploit for CVE-2026-108551

CVE-2026-108551 — openapi-typescript-codegen Code Injection !...

critical-cve-watch

Critical CVE Watch CVSS 9.x A small, defensive watchlist of...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108378 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108378 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693577...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108379 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108379 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693578...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108383 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108383 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693579...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108384 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108384 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693580...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108380 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108380 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693582...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108385 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108385 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693583...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108377 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108377 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693584...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108375 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108375 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693585...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108376 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108376 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693575...

confluent-kafka-config (1.1.4), dc-avro (>=0.3.0, <=0.9.1) +3 more potentially affected by CVE-2026-108375 via dataclasses-avroschema (>=0.36.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.36.3, =0.3.0, =0.0.2, =0.1.15, =0.1.19 Source cves: CVE-2026-108375 Source advisory: MEND:CVE-2026-108375...

CVE-2026-108551

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2026-108551

The openapi-typescript-codegen library, in versions through 0.31.0 , is vulnerable to a code injection flaw (CWE-94) triggered by the use of Handlebars templates. Attackers who control an OpenAPI document can inject arbitrary JavaScript by providing unescaped single quotes in specific fields, suc...

CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...