CVE-2026-63345

The Refitter tool (prior to version 2.1.2 ) is vulnerable to code injection during the generation of C# REST API clients. The root cause is the verbatim emission of OpenAPI paths-object keys into Refit route attributes without proper escaping or character restriction. An attacker can provide a sp...