npm/@typespec/openapi3: high 7.1
OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.15.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-2q42-4q24-7rgv
- https://github.com/microsoft/typespec/security/advisories/GHSA-2q42-4q24-7rgv
- https://github.com/microsoft/typespec/pull/11777
- https://github.com/microsoft/typespec/commit/e0f67bdf3c5a0875dfa98b475648af37caac71a6
- https://github.com/microsoft/typespec
published · modified · JSON