CVE-2026-119027 | Oapi-codegen up to 2.8.0 Server-urls Template servers[].x-go-name code injection

October 29, 2026 Yanac

A vulnerability was found in Oapi-codegen up to 2.8.0 and classified as critical. This vulnerability affects unknown code of the component Server-urls Template. The manipulation of the argument servers[].x-go-name results in code injection.

This vulnerability is identified as CVE-2026-119027. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More