Openapi Ts
Approved changes feed: RSS · Atom
cpe:2.3:a:hey-api:openapi-ts:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hey Api (1cc16426-7b62-5174-9c1e-33f3b5291a40) |
|---|---|
| Product | Openapi Ts (4c5bbac1-71c5-5c9a-b5d1-af96d626f8c6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-48819 |
vulnerable | 2026-07-29 00:55:01.670574 |
Hey API: `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` key
MEDIUM (4.8)
Hey API is an ecosystem for turning API specifications into production-ready code. Prior to 0.97.3, dist/clients/core/params.ts ships a runtime template copied into generated SDKs as params.gen.ts, and buildClientParams writes unknown slot-prefixed keys such as $body_, $headers_, $path_, and $query_ directly to the corresponding slot, allowing $query___proto__ alongside a legitimate q field to set params.query through params["query"]["__proto__"] = value, call Object.setPrototypeOf(params.query, value), and expose inherited attacker-controlled keys during for..in iteration. This issue is fixed in version 0.97.3.
Published: 2026-07-17T19:46:00.402Z
Updated: 2026-07-20T16:24:20.624Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.