Search for packages
| purl | pkg:maven/org.openapitools/openapi-generator-online@3.3.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4f8h-7hey-vqf4
Aliases: CVE-2021-21428 GHSA-23x4-m842-fmwf |
Affected by 1 other vulnerability. |
|
|
VCID-xsqg-w93y-9bds
Aliases: CVE-2024-35219 GHSA-g3hr-p86p-593h |
OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the `outputFolder` option. The issue was fixed in version 7.6.0 by removing the usage of the `outputFolder` option. No known workarounds are available. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T19:30:07.673035+00:00 | GitLab Importer | Affected by | VCID-xsqg-w93y-9bds | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.openapitools/openapi-generator-online/CVE-2024-35219.yml | 38.6.0 |
| 2026-06-12T17:39:22.112366+00:00 | GitLab Importer | Affected by | VCID-4f8h-7hey-vqf4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.openapitools/openapi-generator-online/CVE-2021-21428.yml | 38.6.0 |