https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T12:48:52.121844+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-42678 EUVD-2026-42678 2026-10-24T12:48:52.124924+00:00 EUVD-2026-42678 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15142 fkie_cve-2020-15142 2026-10-24T12:48:52.124994+00:00

In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-9x4c-63pf-525f GHSA-9x4c-63pf-525f — openapi-python-client Arbitrary Code Generation vulnerability 2026-10-24T12:48:52.125051+00:00

Affected: PyPI: openapi-python-client

### Impact Clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution.

Giving this a CVSS of 8.0 (high) with CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:U/RC:C .

### Patches Fix will be included in version 0.5.3

### Workarounds Inspect OpenAPI documents before generating, or inspect generated code before executing.

### For more information If you have any questions or comments about this advisory: * Open an issue in [openapi-python-client](https://github.com/triaxtec/openapi-python-client/issues) * Email us at [danthony@triaxtec.com](mailto:danthony@triaxtec.com)

 https://cve.radiocsirt.org/vuln/gsd-2020-15142 gsd-2020-15142 2026-10-24T12:48:52.125081+00:00 gsd-2020-15142 https://cve.radiocsirt.org/vuln/pysec-2020-71 PYSEC-2020-71 2026-10-24T12:48:52.125094+00:00

Affected: PyPI: openapi-python-client

In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution.