CVE-2020-15142

Vulnerability affects openapi-python-client: clients generated with a malicious OpenAPI Document prior to version 0.5.3 can execute arbitrary Python code after generation. Root cause is lack of proper sanitization/validation during client code generation, enabling arbitrary code execution on subs...

CVE-2020-15141

OpenAPI Python Client vulnerability CVE-2020-15141 affects openapi-python-client before version 0.5.3. A maliciously crafted OpenAPI document can trigger path traversal, allowing generated client files to be written to arbitrary locations on disk. The issue is tied to the code path that generates...