Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 8 hours ago5 views

swagger-typescript-api vulnerable to code injection via unescaped enum string values

Summary swagger-typescript-api interpolates components.schemas..enumi string values into the body of generated TypeScript enum declarations without escaping. A malicious enum value can close the enclosing string literal, terminate the enum body, and inject a bare-block IIFE that executes at modul...

8.3CVSS6.4AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder