GHSA-HQJ5-CW9F-RX67 swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template

Summary swagger-typescript-api interpolates servers0.url directly into a TypeScript class-body field initializer of the generated fetch HttpClient templates/base/http-clients/fetch-http-client.ejs:75, without any escaping. A malicious URL containing a " closes the string literal that initializes...

swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template

Summary swagger-typescript-api interpolates servers0.url directly into a TypeScript class-body field initializer of the generated fetch HttpClient templates/base/http-clients/fetch-http-client.ejs:75, without any escaping. A malicious URL containing a " closes the string literal that initializes...

CVE-2026-67216

cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSONCompare. When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested documen...

CVE-2026-67216

cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSONCompare. When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested documen...

CVE-2026-16192

creationtimestamp| type| source ---|---|--- 2026-07-29 14:14:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrs4dcufgq2l 2026-07-30 05:15:17+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-65924

creationtimestamp| type| source ---|---|--- 2026-07-29 14:00:04+00:00| seen| https://t.me/truesecator/8453 2026-07-30 00:00:29+00:00| seen| https://t.me/truesecator/8453 2026-09-02 06:00:16+00:00| seen| https://t.me/RussianOSINT/7625 2026-09-03 00:00:46+00:00| seen| https://t.me/RussianOSINT/7625...

CVE-2026-64374

A flaw was found in the Linux kernel's real-time RT scheduler. In non-real-time configurations, the RTPUSHIPI mechanism, designed to improve task migration, can lead to a live lock. This occurs when a CPU handling heavy network traffic is repeatedly interrupted by other CPUs attempting to schedul...

CVE-2026-67216

cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSONCompare. When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested documen...

CVE-2026-67216

cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSONCompare. When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested documen...

CVE-2026-67216

Summary of CVE-2026-67216 (cJSON) : Affected software is cJSON up to version 1.7.19. The flaw is in cJSON_Compare(), which recurses into shared subtrees twice without a depth guard, causing exponential time growth with nesting depth. A small, deeply nested JSON (depth ~40) can take hours to compa...

CVE-2026-64428

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output SCH controller. When the PREEMPTRT Preemptible Real-Time feature is enabled, a locking mechanism intended for sleeping contexts is incorrectly used within a non-sleepable interrupt setup path. This can lead to a system crash...

CVE-2026-41703

creationtimestamp| type| source ---|---|--- 2026-07-29 13:00:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0269 2026-07-29 16:45:12+00:00| seen| https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-vmware-vcenter-en-esx-producten-update-onmiddellijk 2026-07-29 17:00:04+00:00|...

CVE-2023-233397

creationtimestamp| type| source ---|---|--- 2026-07-29 12:02:22+00:00| seen| https://t.me/reverseame/4066 2026-07-30 00:02:24+00:00| seen| https://t.me/reverseame/4066 2026-08-02 10:04:23+00:00| published-proof-of-concept| https://t.me/reverseame/4066 2026-08-03 02:07:13+00:00|...

CVE-2016-3372

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:43+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:59+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:06+00:00| seen|...

CVE-2016-3334

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:43+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:02:00+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:04+00:00| seen|...

CVE-2016-3228

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:37+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:59+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:07+00:00| seen|...

CVE-2015-6095

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:37+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:59+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:06+00:00| seen|...

CVE-2015-0089

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:27+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 01:01:15+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:05+00:00| seen|...

CVE-2015-1728

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:22+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:07+00:00| seen|...

CVE-2016-0090

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:17+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:51+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:11+00:00| seen|...