Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/01 8:55 p.m.10 views

@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` key

Summary dist/clients/core/params.ts in @hey-api/openapi-ts ships a runtime template that is copied verbatim into every generated SDK as params.gen.ts. When a caller passes an object argument containing an unknown key starting with a slot prefix $body, $headers, $path, $query, the function strips...

4.8CVSS5.9AI score0.00352EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder