swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
npm swagger-typescript-api · Upgrade to 13.12.2 or later · <= 13.12.1 · CVE-2026-54666 · GHSA-w284-33mx-6g9v
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
26–32 of 32 matching · newest first
npm swagger-typescript-api · Upgrade to 13.12.2 or later · <= 13.12.1 · CVE-2026-54666 · GHSA-w284-33mx-6g9v
npm swagger-typescript-api · Upgrade to 13.12.2 or later · <= 13.12.1 · CVE-2026-54664 · GHSA-5f94-x226-ccpm
servers[0].url in axios http-client templatenpm swagger-typescript-api · Upgrade to 13.12.2 or later · <= 13.12.1 · CVE-2026-54661 · GHSA-38c3-wv3c-v3xj
$refnpm swagger-typescript-api · Upgrade to 13.12.2 or later · <= 13.12.1 · CVE-2026-54663 · GHSA-x36r-4347-pm5x
servers[0].url in fetch http-client templatenpm swagger-typescript-api · Upgrade to 13.12.2 or later · <= 13.12.1 · CVE-2026-54662 · GHSA-hqj5-cw9f-rx67
$refnpm swagger-typescript-api · Upgrade to 13.12.2 or later · <= 13.12.1 · CVE-2026-54660 · GHSA-h754-fxp7-88wx
BROWSER handling allows browser argument injectioncrates.io webbrowser · Upgrade to 1.2.2 or later · >= 0.0.0-0, < 1.2.2 · GHSA-2ph8-5cr8-hr33
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.