Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/07/29 2:33 p.m.12 views

swagger-typescript-api vulnerable to code injection via unescaped enum string values

Summary swagger-typescript-api interpolates components.schemas..enumi string values into the body of generated TypeScript enum declarations without escaping. A malicious enum value can close the enclosing string literal, terminate the enum body, and inject a bare-block IIFE that executes at modul...

8.3CVSS6.4AI score0.0027EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder