@hey-api/openapi-ts vulnerabilities

CVEs whose affected-version data names the @hey-api/openapi-ts package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48819Medium· 4.8

2mo ago

@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>_proto` key

@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` key

▾ Sunlithey-api · @hey-api/openapi-tsEPSS 0.35%via GHSA