Lucene search
+L

3932 matches found

Github Security Blog
Github Security Blog
added 5 hours ago3 views

swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template

Summary swagger-typescript-api interpolates servers0.url directly into a TypeScript string literal inside the HttpClient constructor body of the generated axios client templates/base/http-clients/axios-http-client.ejs:71, without any escaping. A malicious URL containing a " closes the string...

8.3CVSS6.5AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder