Most recent entries from all

EUVD-2026-42680

fkie_cve-2020-15141

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.

GHSA-7wgr-7666-7pwj — Path Traversal in openapi-python-client

Affected: PyPI: openapi-python-client

### Impact Path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.

Giving this a CVSS score of 3.0 (Low) with CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N/E:P/RL:U/RC:C

### Patches A fix is being worked on for version 0.5.3

### Workarounds Inspect OpenAPI documents before generating clients for them.

### For more information If you have any questions or comments about this advisory: * Open an issue in [openapi-python-client](https://github.com/triaxtec/openapi-python-client/issues) * Email us at [danthony@triaxtec.com](mailto:danthony@triaxtec.com)

gsd-2020-15141

PYSEC-2020-70

Affected: PyPI: openapi-python-client