p PatchFirst

PatchFirst · Latest vulnerabilities

openapi-python-client vulnerabilities

Vulnerability published for openapi-python-client in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 3

  1. CVE-2026-105801

    High · CVSS 8.4EPSS 0.14%Fix available

    openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

    openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain attacker-controlled Python that executes when a user imports the client, affecting the importing environment's integrity and potentially its confidentiality and availability. This issue is fixed in version 0.29.1.

    openapi-python-clientPython
    • Update to 0.29.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2020-15141

    Low · CVSS 3EPSS 1.14%Fix available

    Path Traversal in openapi-python-client

    In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.

    openapi-python-client openapi-python-clientPython
    • Update to 0.5.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →