@hanzo/openapi-codegen (0.0.0), @testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71864 via orval (>=8.5.3, <=8.14.0)

orval NPM version =8.5.3, =0.6.3, =0.7.3 Source cves: CVE-2026-71864 Source advisory: OSV:GHSA-6437-GXHQ-PQV8...

@hanzo/openapi-codegen (0.0.0), @testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-62680 via orval (>=8.5.3, <=8.14.0)

orval NPM version =8.5.3, =0.6.3, =0.7.3 Source cves: CVE-2026-62680 Source advisory: GHSA-CXQ5-97V7-87J8...

@hanzo/openapi-codegen (0.0.0), @testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-62680 via orval (>=8.5.3, <=8.14.0)

orval NPM version =8.5.3, =0.6.3, =0.7.3 Source cves: CVE-2026-62680 Source advisory: OSV:GHSA-CXQ5-97V7-87J8...

@hanzo/openapi-codegen (0.0.0), @testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-72716 via orval (>=8.5.3, <=8.14.0)

orval NPM version =8.5.3, =0.6.3, =0.7.3 Source cves: CVE-2026-72716 Source advisory: GHSA-P4CG-3328-RVFG...

@hanzo/openapi-codegen (0.0.0), @testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-72716 via orval (>=8.5.3, <=8.14.0)

orval NPM version =8.5.3, =0.6.3, =0.7.3 Source cves: CVE-2026-72716 Source advisory: OSV:GHSA-P4CG-3328-RVFG...

@hanzo/openapi-codegen (0.0.0), @testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71866 via orval (>=8.5.3, <=8.14.0)

orval NPM version =8.5.3, =0.6.3, =0.7.3 Source cves: CVE-2026-71866 Source advisory: GHSA-6MR6-JVCR-2F25...

@hanzo/openapi-codegen (0.0.0), @testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71866 via orval (>=8.5.3, <=8.14.0)

orval NPM version =8.5.3, =0.6.3, =0.7.3 Source cves: CVE-2026-71866 Source advisory: OSV:GHSA-6MR6-JVCR-2F25...

com.github.goodforgod:micronaut-arangodb (2.2.0), io.kokuwa.micronaut:micronaut-openapi-codegen (>=2.1.5, <=2.1.6) +42 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (2.5.5)

io.micronaut:micronaut-inject MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - com.github.goodforgod:micronaut-arangodb 2.2.0 - io.kokuwa.micronaut:micronaut-openapi-codegen =2.1.5...

Malicious code in epic-openapi-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c376cbf488eb74d4d24b10cd6153640f94a3ceb831332dc1f0f056934c91ed The package epic-openapi-codegen was found to contain malicious code...

MAL-2025-49177 Malicious code in epic-openapi-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c376cbf488eb74d4d24b10cd6153640f94a3ceb831332dc1f0f056934c91ed The package epic-openapi-codegen was found to contain malicious code...

EUVD-2025-37116

Malicious code in epic-openapi-codegen npm...

io.kokuwa.micronaut:micronaut-openapi-codegen (1.5.0), io.micronaut:micronaut-function (2.0.3) +17 more potentially affected by CVE-2022-21700 via io.micronaut:micronaut-http (2.0.3)

io.micronaut:micronaut-http MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http and may be impacted: - io.kokuwa.micronaut:micronaut-openapi-codegen 1.5.0 - io.micronaut:micronaut-function 2.0.3 -...

io.kokuwa.micronaut:micronaut-openapi-codegen (>=2.1.8, <=2.1.9), io.micronaut.acme:micronaut-acme (3.0.0-rc1) +33 more potentially affected by CVE-2022-21700 via io.micronaut:micronaut-http (2.5.8)

io.micronaut:micronaut-http MAVEN version 2.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http and may be impacted: - io.kokuwa.micronaut:micronaut-openapi-codegen =2.1.8, =3.0.0-m1, =4.0.0-rc1, =4.0.0-rc1, =4.0.0-rc1,...

com.backbase.oss:boat-maven-plugin (>=0.1.3, <=0.1.4), de.jsyn:unifi-api (1.0.0) +8 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.2.3)

org.openapitools:openapi-generator MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - com.backbase.oss:boat-maven-plugin =0.1.3, =0.2.2, =0.5.0, =0.5.0, =0.5.1 -...