VulnSea

christianhelle has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 8.6 (high). The most common weakness class is CWE-94 (3).

CVEs per month

Last 12 months, by publish date

120102030405060708091011
Exploited share
0% vs 1% corpus
Median CVSS
8.6
Publish → KEV
—
Last 90 days
4 prev 0

Products

  • refitter 4
4
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

christianhelle vulnerabilities

CVEs affecting christianhelle, newest first. Open any entry for full detail, references, and exploit status.

4 CVEsRSS

CVE-2026-63345High· 8.6
1w ago

Refitter: C# source injection through OpenAPI path keys

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, OpenAPI `paths`-object keys are emitted verbatim into Refit route attributes such as `[Get("<path>")]` without escaping quotation marks or re…

▾ Twilightchristianhelle · refitterEPSS 0.35%via CVEORG
CVE-2026-63346High· 8.6PoC
1w ago

Refitter: C# source injection through OpenAPI header parameter names

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter name in `parameters[].name` with `in: header` is emitted verbatim into a Refit `[Header("<name>")]` attribute string wit…

▾ Midnightchristianhelle · refitterEPSS 0.35%via CVEORG
CVE-2026-63184High· 7.1PoC
1w ago

Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusion

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.1, the `refitter` dotnet tool invokes `NJsonSchema` with unsafe defaults for `$ref` resolution when generating Refit interfaces and contracts fr…

▾ Midnightchristianhelle · refitterEPSS 0.41%via CVEORG
CVE-2026-63344High· 8.6
1w ago

Refitter: C# source injection through OpenAPI content-type map keys

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, content-type keys in the content maps of `requestBody/responses` are emitted verbatim into a Refit `[Headers("Accept: <ct>", "Content-Type: <…

▾ Twilightchristianhelle · refitterEPSS 0.35%via CVEORG
christianhelle vulnerabilities (CVEs) · VulnSea