2 matches found
OAPI Codegen code injection vulnerability
Versions prior to 2.8.1 of oapi-codegen contain a code injection vulnerability. This vulnerability arises because the server-urls template fails to escape the servers.x-go-name value, allowing attackers to inject Go code. When the victim builds and imports the generated package, the injected func...
7.7CVSS6.2AI score0.00394EPSS
SaveExploits0References8
20