CVE-2026-63184 Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusion

Refitter is a tool for generating a C REST API client using the Refit library. Prior to 2.1.1, the refitter dotnet tool invokes NJsonSchema with unsafe defaults for $ref resolution when generating Refit interfaces and contracts from attacker-controlled or attacker-influenced OpenAPI descriptions...