acacode

Products

ProductCVEsExploitedLatest
swagger-typescript-api6–Jul 29, 2026

Exploited and recent CVEs

  • CVE-2026-54666 High 8.3 swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies 0.4%
  • CVE-2026-54664 High 8.3 swagger-typescript-api vulnerable to code injection via unescaped enum string values 0.5%
  • CVE-2026-54661 High 8.3 swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template 0.5%
  • CVE-2026-54663 Medium 6.1 swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref` 0.2%
  • CVE-2026-54662 High 8.3 swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template 0.3%
  • CVE-2026-54660 High 7.4 swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref` 0.3%