https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T14:24:37.845223+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-42680 EUVD-2026-42680 2026-10-24T14:24:37.848481+00:00 EUVD-2026-42680 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15141 fkie_cve-2020-15141 2026-10-24T14:24:37.848511+00:00

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.

 https://cve.radiocsirt.org/vuln/ghsa-7wgr-7666-7pwj GHSA-7wgr-7666-7pwj — Path Traversal in openapi-python-client 2026-10-24T14:24:37.848540+00:00

Affected: PyPI: openapi-python-client

### Impact Path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.

Giving this a CVSS score of 3.0 (Low) with CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N/E:P/RL:U/RC:C

### Patches A fix is being worked on for version 0.5.3

### Workarounds Inspect OpenAPI documents before generating clients for them.

### For more information If you have any questions or comments about this advisory: * Open an issue in [openapi-python-client](https://github.com/triaxtec/openapi-python-client/issues) * Email us at [danthony@triaxtec.com](mailto:danthony@triaxtec.com)

 https://cve.radiocsirt.org/vuln/gsd-2020-15141 gsd-2020-15141 2026-10-24T14:24:37.848570+00:00 gsd-2020-15141 https://cve.radiocsirt.org/vuln/pysec-2020-70 PYSEC-2020-70 2026-10-24T14:24:37.848583+00:00

Affected: PyPI: openapi-python-client

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.