cve.bz

CVE-2020-15142

9.0 criticalEPSS 1.8%

Critical (9.0) in openapi-python-client project openapi-python-client. EPSS 1.8% chance of exploitation in the next 30 days. Fixed in openapi-python-client 0.5.3.

In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution.

Severity

CVSS 3.1

9.0 critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS
1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE
CWE-94
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-9x4c-63pf-525fPyPIopenapi-python-client<0.5.30.5.3
PYSEC-2020-71PyPIopenapi-python-client<0.5.30.5.3

References

Check your stackJSON