CVE-2026-119027

A flaw was found in oapi-codegen. An attacker who supplies a crafted OpenAPI specification can achieve arbitrary code execution on systems that build or run the generated code. The vulnerability exists because server configuration properties are emitted unescaped into Go code templates, allowing...