PT-2020-14222

Name of the Vulnerable Software and Affected Versions openapi-python-client versions prior to 0.5.3 Description The issue allows clients generated with a maliciously crafted OpenAPI Document to generate arbitrary Python code, leading to arbitrary code execution when the malicious client is...

PT-2020-14221

Name of the Vulnerable Software and Affected Versions openapi-python-client versions prior to 0.5.3 Description The issue allows for a path traversal vulnerability. If a user generates a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in...

CVE-2020-15141: Improper Limitation of a Pathname to a Restricted Directory

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk...