Lucene search
+L

28 matches found

OSV
OSV
added 2026/07/29 2:33 p.m.12 views

GHSA-5F94-X226-CCPM swagger-typescript-api vulnerable to code injection via unescaped enum string values

Summary swagger-typescript-api interpolates components.schemas..enumi string values into the body of generated TypeScript enum declarations without escaping. A malicious enum value can close the enclosing string literal, terminate the enum body, and inject a bare-block IIFE that executes at modul...

8.3CVSS6.4AI score0.0027EPSS
SaveExploits0References5
Rows per page
Query Builder