npm/@cap-js/openapi: critical 9.6
Supply chain compromise via malicious @cap-js/openapi
Action: Upgrade @cap-js/openapi to 1.4.2 or later.
npm i @cap-js/openapi@1.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.1 | 1.4.2 | - |
Fixed versions
| 1.4.2 |
Sources
- osv: GHSA-jpvj-wpmj-h7rv
- https://github.com/cap-js/openapi/security/advisories/GHSA-jpvj-wpmj-h7rv
- https://github.com/cap-js/openapi
- https://me.sap.com/notes/3747787
- https://www.sap.com/documents/2026/05/8203a8b9-4d7f-0010-bca6-c68f7e60039b.html
published · modified · JSON