594 matches found
swagger-typescript-api vulnerable to code injection via unescaped enum string values
Summary swagger-typescript-api interpolates components.schemas..enumi string values into the body of generated TypeScript enum declarations without escaping. A malicious enum value can close the enclosing string literal, terminate the enum body, and inject a bare-block IIFE that executes at modul...
CVE-2026-54664
swagger-typescript-api prior to 13.12.2 is vulnerable: enum string values are inserted into generated TypeScript enums without escaping, enabling attacker-controlled OpenAPI specs to inject code that runs on module import. Root cause is Ts.StringValue wrapping values without escaping, propagated ...
CVE-2026-54664 swagger-typescript-api vulnerable to code injection via unescaped enum string values
swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas..enumi values to Ts.StringValue in src/configuration.ts without escaping before...
CVE-2026-54664 swagger-typescript-api vulnerable to code injection via unescaped enum string values
swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas..enumi values to Ts.StringValue in src/configuration.ts without escaping before...
EUVD-2026-50366
swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas..enumi values to Ts.StringValue in src/configuration.ts without escaping before...
CVE-2026-64243
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
Linux Distros Unpatched Vulnerability : CVE-2026-64243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the...
UBUNTU-CVE-2026-64243
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
SUSE CVE-2026-64243
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
CVE-2026-64243
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
DEBIAN-CVE-2026-64243
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
EUVD-2026-44927
Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator...
GHSA-7F3J-J7JJ-R3VR Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator
Code Generation Literal Injection in Kiota Python Generator Leads to Arbitrary Code Execution at Import Time. The Kiota Python code generator is vulnerable to a code generation literal injection issue when processing malicious or untrusted OpenAPI specifications. Specifically, attacker-controlled...
Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator
Code Generation Literal Injection in Kiota Python Generator Leads to Arbitrary Code Execution at Import Time. The Kiota Python code generator is vulnerable to a code generation literal injection issue when processing malicious or untrusted OpenAPI specifications. Specifically, attacker-controlled...
CVE-2026-64243
CVE-2026-64243 (Linux kernel, ASoC codecs: simple-mux) A fix was applied to correct the bounds check in simple_mux_control_put for enum controls. Previously the code rejected values greater than e->items, but enum controls are zero-based, making 0 and 1 valid for a two-entry mux and 2 should b...
CVE-2026-64243
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
EUVD-2026-48652
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
CVE-2026-64243 ASoC: codecs: simple-mux: Fix enum control bounds check
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
CVE-2026-64243 ASoC: codecs: simple-mux: Fix enum control bounds check
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...
PT-2026-64358
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC codecs simple-mux component where the simple mux control put function fails to properly validate enum control bounds. Because enum control values are...