Skip to content

Product

cap-js @cap-js/openapi vulnerabilities

1 published CVE affecting cap-js @cap-js/openapi, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest cap-js @cap-js/openapi CVEs

Newest publication first

  1. GHSA-jpvj-wpmj-h7rv Supply chain compromise via malicious @cap-js/openapi

    Published
    CriticalCVSS 9.6

    Impact On May 19, 2026, a compromised version of @cap-js/openapi@1.4.1 was published. The malicious packages harvested credentials and attempted self-propagation. If a compromised version was installed, all credentials accessible on that machine (npm tokens, cloud provider creden...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.