Lucene search
+L

2 matches found

OSV
OSV
added 2026/09/16 7:07 p.m.2 views

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

7.8CVSS
SaveExploits0References8
Rows per page
Query Builder