acacode vulnerabilities

Newest CVEs

• CVE-2026-54666

  swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies

  acacode · swagger-typescript-api

  High8.3
• CVE-2026-54664

  swagger-typescript-api vulnerable to code injection via unescaped enum string values

  acacode · swagger-typescript-api

  High8.3
• CVE-2026-54661

  swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template

  acacode · swagger-typescript-api

  High8.3
• CVE-2026-54663

  swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`

  acacode · swagger-typescript-api

  Medium6.1
• CVE-2026-54662

  swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template

  acacode · swagger-typescript-api

  High8.3
• CVE-2026-54660

  swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`

  acacode · swagger-typescript-api

  High7.4