115 matches found
CVE-2026-63346
Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.2, the header parameter name in parameters.name with in: header is emitted verbatim into a Refit Header"" attribute string without escaping quotation marks. An attacker-influenced OpenAPI description can...
CVE-2026-63346 Refitter: C# source injection through OpenAPI header parameter names
Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.2, the header parameter name in parameters.name with in: header is emitted verbatim into a Refit Header"" attribute string without escaping quotation marks. An attacker-influenced OpenAPI description can...
CVE-2026-63346
The Refitter tool, used to generate C# REST API clients, is vulnerable to C# source injection prior to version 2.1.2 . The root cause is the verbatim emission of header parameter names from an OpenAPI description into a Refit [Header("")] attribute without escaping quotation marks. An attacker-in...
CVE-2026-63346 Refitter: C# source injection through OpenAPI header parameter names
Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.2, the header parameter name in parameters.name with in: header is emitted verbatim into a Refit Header"" attribute string without escaping quotation marks. An attacker-influenced OpenAPI description can...
CVE-2026-63346 Refitter: C# source injection through OpenAPI header parameter names
Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.2, the header parameter name in parameters.name with in: header is emitted verbatim into a Refit Header"" attribute string without escaping quotation marks. An attacker-influenced OpenAPI description can...
EUVD-2026-114540
Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.2, the header parameter name in parameters.name with in: header is emitted verbatim into a Refit Header"" attribute string without escaping quotation marks. An attacker-influenced OpenAPI description can...
CVE-2026-63346
Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.2, the header parameter name in "parameters.name" with "in: header" is emitted verbatim into a Refit "Header""" attribute string without escaping quotation marks. An attacker-influenced OpenAPI description...
PT-2026-134240
Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.2, the header parameter name in parameters.name with in: header is emitted verbatim into a Refit Header"" attribute string without escaping quotation marks. An attacker-influenced OpenAPI description can...
CVE-2026-63346: christianhelle refitter: Refitter is a tool for generating a C# REST API client using the Refit library
Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.2, the header parameter name in parameters.name with in: header is emitted verbatim into a Refit Header" " attribute string without escaping quotation marks. An attacker-influenced OpenAPI description can...
EulerOS 2.0 SP13 : python-jwt (EulerOS-SA-2026-4094)
According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...
EulerOS 2.0 SP13 : python-jwt (EulerOS-SA-2026-4185)
According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...
EulerOS 2.0 SP15 : python-jwt (EulerOS-SA-2026-4008)
According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...
EulerOS 2.0 SP10 : python-jwt (EulerOS-SA-2026-3761)
According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...
CVE-2026-82756
ash_authentication_oauth2_server (ash-project) is vulnerable to header parameter injection in its BearerPlug and RequireScopePlug. A tenant-derived resource_metadata URL is interpolated directly into the WWW-Authenticate challenge without escaping, allowing an unauthenticated attacker in a multi-...
EEF-CVE-2026-82756 ash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injection
Summary Improper Encoding or Escaping of Output vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to inject arbitrary authentication parameters into the WWW-Authenticate challenge header. BearerPlug and RequireScopePlug built the Bearer...
NPM: Orval: Import-time RCE via header-parameter default -> zod module-level template literal
NPM: Orval: Import-time RCE via header-parameter default - zod module-level template literal vulnerability discovered by ? in WordPress Npm orval versions 8.21.0...
Orval: Import-time RCE via header-parameter default -> zod module-level template literal
Summary Orval's zod schema generation emits the header-parameter default value as a module-level template literal export const Default = ; without escaping $ or the backtick. A default of the form v$w injects a live JavaScript expression evaluated when the generated zod schema module is imported,...
EUVD-2026-62601
Orval: Import-time RCE via header-parameter default - zod module-level template literal...
GHSA-6437-GXHQ-PQV8 Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client
Summary orval's zod client emits each header parameter name as a double-quoted key in the generated zod.object... request-validation schema WITHOUT escaping the double quote. A " in the header parameter name closes the key and lands in object-literal context, where an injected computed property k...