swagger-typescript-api

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. swagger-typescript-api vulnerable to code injection via unescaped enum string valuesCVE-2026-54664acacode · CVSS 8.3 · 0.5% likely

   CWE-1336

2. swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client templateCVE-2026-54661acacode · CVSS 8.3 · 0.5% likely

   CWE-1336

3. swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodiesCVE-2026-54666acacode · CVSS 8.3 · 0.4% likely

   CWE-1336

4. swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client templateCVE-2026-54662acacode · CVSS 8.3 · 0.3% likely

   CWE-1336

5. swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`CVE-2026-54660acacode · CVSS 7.4 · 0.3% likely

   CWE-201

6. swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`CVE-2026-54663acacode · CVSS 6.1 · 0.2% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.