{"action":"Upgrade @typespec/spector to 0.1.0-alpha.27 or later.","affected":[{"fixed":"0.1.0-alpha.27","introduced":"0"}],"component":"@typespec/spector","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.1.0-alpha.27"],"ghsa_id":"GHSA-7q9c-hpx7-9cwm","id":"tcs_01M5KFANGX6V598SPVHGWAN21N","modified_at":"2026-09-04T22:00:09.365315287Z","published_at":"2026-09-04T21:43:13Z","references":["https://osv.dev/vulnerability/GHSA-7q9c-hpx7-9cwm","https://github.com/microsoft/typespec/security/advisories/GHSA-7q9c-hpx7-9cwm","https://github.com/microsoft/typespec/pull/11274","https://github.com/microsoft/typespec/commit/30d6f6598dd796e2d6aea038139d29b91e6a2da7","https://github.com/microsoft/typespec/commit/39f8f0230bb59b17464d8173b6bff4ddee8082a1","https://github.com/microsoft/typespec","https://github.com/microsoft/typespec/releases/tag/@typespec/spector@0.1.0-alpha.27"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7q9c-hpx7-9cwm","url":"https://osv.dev/vulnerability/GHSA-7q9c-hpx7-9cwm"}],"summary":"TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop"}