28 matches found
GHSA-5F94-X226-CCPM swagger-typescript-api vulnerable to code injection via unescaped enum string values
Summary swagger-typescript-api interpolates components.schemas..enumi string values into the body of generated TypeScript enum declarations without escaping. A malicious enum value can close the enclosing string literal, terminate the enum body, and inject a bare-block IIFE that executes at modul...
8.3CVSS6.4AI score0.0027EPSS
SaveExploits0References5
20