CVE-2026-54662 | acacode swagger-typescript-api up to 13.12.1 Code Generation fetch-http-client.ejs createApiConfig injection

A vulnerability was found in acacode swagger-typescript-api up to 13.12.1. It has been declared as critical. Impacted is the function createApiConfig of the file src/code-gen-process.ts/templates/base/http-clients/fetch-http-client.ejs of the component Code Generation. The manipulation results in injection.

This vulnerability is known as CVE-2026-54662. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More