Product
oapi-codegen versions 2.5.0 before 2.8.1 contain a code injection vulnerability allowing attackers to execute Go code via crafted OpenAPI documents.