Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Oapi-codegen CVE-2026-119028
oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Oapi-codegen CVE-2026-119027
oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers[].x-go-name value
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit