openapi-python-client@0.5.1 vulnerabilities

Generate modern Python clients from OpenAPI

  • latest version

    0.23.0

  • latest non vulnerable version

  • first published

    4 years ago

  • latest version published

    16 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the openapi-python-client package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Arbitrary Code Execution

    openapi-python-client is a package that generates modern Python clients from OpenAPI.

    Affected versions of this package are vulnerable to Arbitrary Code Execution. Clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution.

    How to fix Arbitrary Code Execution?

    Upgrade openapi-python-client to version 0.5.3 or higher.

    [,0.5.3)
    • L
    Directory Traversal

    openapi-python-client is a package that generates modern Python clients from OpenAPI.

    Affected versions of this package are vulnerable to Directory Traversal via a maliciously crafted OpenAPI document.

    How to fix Directory Traversal?

    Upgrade openapi-python-client to version 0.5.3 or higher.

    [,0.5.3)