Openapi-generator - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2023-03-31.

Products

CVE-2023-27162 - CVSS 9.1 (critical), 2023-03-31: openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This…
CVE-2021-21430 - CVSS 6.2 (medium), 2021-05-10: OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI…
CVE-2021-21428 - CVSS 9.3 (critical), 2021-05-10: Openapi generator is a java tool which allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically…
CVE-2021-21429 - CVSS 4 (medium), 2021-04-27: OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using…
CVE-2019-11405 - CVSS 8.1 (high), 2019-04-22: OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which…