Skip to content
Aacacode
Exploited and recent CVEs
-
CVE-2026-54666
High 8.3
swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
0.4%
-
CVE-2026-54664
High 8.3
swagger-typescript-api vulnerable to code injection via unescaped enum string values
0.5%
-
CVE-2026-54661
High 8.3
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
0.5%
-
CVE-2026-54663
Medium 6.1
swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
0.2%
-
CVE-2026-54662
High 8.3
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
0.3%
-
CVE-2026-54660
High 7.4
swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
0.3%