CVE-2026-54663 | acacode swagger-typescript-api up to 13.12.1 Schema Resolver resolved-swagger-schema.ts warmUpRemoteSchemasCache $ref input validation

July 29, 2026 Yanac

A vulnerability identified as critical has been detected in acacode swagger-typescript-api up to 13.12.1. This affects the function warmUpRemoteSchemasCache of the file src/resolved-swagger-schema.ts of the component Schema Resolver. Performing a manipulation of the argument $ref results in improper input validation.

This vulnerability was named CVE-2026-54663. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More