CVE-2026-48819 | hey-api openapi-ts up to 0.97.2 Parameter Slot params.ts buildClientParams body_/headers_/path_/query_ iteration

July 17, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in hey-api openapi-ts up to 0.97.2. The impacted element is the function buildClientParams of the file dist/clients/core/params.ts of the component Parameter Slot Handler. Performing a manipulation of the argument body_/headers_/path_/query_ results in excessive iteration.

This vulnerability is reported as CVE-2026-48819. The attack requires a local approach. No exploit exists.VulDB Recent EntriesRead More