Lucene search
+L

594 matches found

Github Security Blog
Github Security Blog
added 2026/07/29 2:33 p.m.19 views

swagger-typescript-api vulnerable to code injection via unescaped enum string values

Summary swagger-typescript-api interpolates components.schemas..enumi string values into the body of generated TypeScript enum declarations without escaping. A malicious enum value can close the enclosing string literal, terminate the enum body, and inject a bare-block IIFE that executes at modul...

8.3CVSS6.4AI score0.0027EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/07/29 2:32 p.m.120 views

CVE-2026-54664

swagger-typescript-api prior to 13.12.2 is vulnerable: enum string values are inserted into generated TypeScript enums without escaping, enabling attacker-controlled OpenAPI specs to inject code that runs on module import. Root cause is Ts.StringValue wrapping values without escaping, propagated ...

8.3CVSS5.9AI score0.0027EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/29 2:32 p.m.35 views

CVE-2026-54664 swagger-typescript-api vulnerable to code injection via unescaped enum string values

swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas..enumi values to Ts.StringValue in src/configuration.ts without escaping before...

8.3CVSS0.0027EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/29 2:32 p.m.12 views

CVE-2026-54664 swagger-typescript-api vulnerable to code injection via unescaped enum string values

swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas..enumi values to Ts.StringValue in src/configuration.ts without escaping before...

8.3CVSS5.9AI score
SaveExploits0References6
EUVD
EUVD
added 2026/07/29 2:32 p.m.13 views

EUVD-2026-50366

swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-parser/base-schema-parsers/enum.ts passes components.schemas..enumi values to Ts.StringValue in src/configuration.ts without escaping before...

8.3CVSS5.9AI score0.0027EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/07/27 12:00 a.m.28 views

CVE-2026-64243

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

7.1CVSS5.4AI score0.00117EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/07/27 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-64243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the...

7.1CVSS5.9AI score0.00117EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/27 12:00 a.m.12 views

UBUNTU-CVE-2026-64243

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

7.1CVSS5.7AI score0.00117EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
added 2026/07/25 12:13 a.m.10 views

SUSE CVE-2026-64243

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

7.1CVSS5.8AI score0.00117EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/24 4:16 p.m.12 views

CVE-2026-64243

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

7.1CVSS0.00117EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/24 4:16 p.m.22 views

DEBIAN-CVE-2026-64243

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

7.1CVSS5.7AI score0.00117EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/24 3:45 p.m.41 views

EUVD-2026-44927

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator...

7.5CVSS5.9AI score0.01376EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/24 3:45 p.m.11 views

GHSA-7F3J-J7JJ-R3VR Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator

Code Generation Literal Injection in Kiota Python Generator Leads to Arbitrary Code Execution at Import Time. The Kiota Python code generator is vulnerable to a code generation literal injection issue when processing malicious or untrusted OpenAPI specifications. Specifically, attacker-controlled...

7.5CVSS6.2AI score0.01376EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/24 3:45 p.m.12 views

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator

Code Generation Literal Injection in Kiota Python Generator Leads to Arbitrary Code Execution at Import Time. The Kiota Python code generator is vulnerable to a code generation literal injection issue when processing malicious or untrusted OpenAPI specifications. Specifically, attacker-controlled...

7.5CVSS6.1AI score0.01376EPSS
SaveExploits0References4Affected Software2
CVE
CVE
added 2026/07/24 3:27 p.m.35 views

CVE-2026-64243

CVE-2026-64243 (Linux kernel, ASoC codecs: simple-mux) A fix was applied to correct the bounds check in simple_mux_control_put for enum controls. Previously the code rejected values greater than e->items, but enum controls are zero-based, making 0 and 1 valid for a two-entry mux and 2 should b...

7.1CVSS5.8AI score0.00117EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/24 3:27 p.m.10 views

CVE-2026-64243

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

5.7AI score0.00117EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2026/07/24 3:27 p.m.12 views

EUVD-2026-48652

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

5.8AI score0.00117EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/07/24 3:27 p.m.38 views

CVE-2026-64243 ASoC: codecs: simple-mux: Fix enum control bounds check

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

7.1CVSS0.00117EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/24 3:27 p.m.10 views

CVE-2026-64243 ASoC: codecs: simple-mux: Fix enum control bounds check

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the two-entry mux used by this driver, valid values are 0 and 1, so valu...

7.1CVSS5.8AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.15 views

PT-2026-64358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC codecs simple-mux component where the simple mux control put function fails to properly validate enum control bounds. Because enum control values are...

7.1CVSS5.8AI score0.00117EPSS
SaveExploits0
Rows per page
Query Builder