openapi-python-client

openapi-python-client

Python Package IndexPython Package Index
PyPIpypi.org
GitHubgithub.com
Releases105
Frequency3 weeks 22 hours
Last Release
Generate modern Python clients from OpenAPI
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-15142↗
8 HIGH6 MEDIUM

In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution.

CVE-2020-15141↗
3 LOW4 MEDIUM

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.