{"vulnerability": "CVE-2026-54661", "sightings": [{"uuid": "fd20c84d-60ce-4155-93bb-a780e81a9fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54661", "type": "published-proof-of-concept", "source": "https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-38c3-wv3c-v3xj", "content": "", "creation_timestamp": "2026-07-29T16:35:17.293253Z"}, {"uuid": "faf705da-a5ca-4bb5-b348-9286c5903c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54661", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrsed7ojg425", "content": "**\u5bfe\u8c61\u306e\u88fd\u54c1\uff08\u30a2\u30d7\u30ea\uff09\u540d\u3068\u30d0\u30fc\u30b8\u30e7\u30f3**: swagger-typescript-api (\u30d0\u30fc\u30b8\u30e7\u30f313.12.2\u672a\u6e80) **\u8106\u5f31\u6027\u306e\u5185\u5bb9**: OpenAPI\u4ed5\u69d8\u306eURL\u304c\u30a8\u30b9\u30b1\u30fc\u30d7\u3055\u308c\u305a\u306bH\u2026\nCVE-2026-54661 CVSS 8.3 | HIGH", "creation_timestamp": "2026-07-29T16:37:32.376443Z"}, {"uuid": "196ad907-b066-4c08-9bd3-c7aefe9cb77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsk7fled62q", "content": "CVE-2026-54661 - swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template\nCVE ID : CVE-2026-54661\n \n Published : July 29, 2026, 3:16 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : swagger-typescript-api generates API cli...", "creation_timestamp": "2026-07-29T18:22:46.154748Z"}]}