oasdiff vulnerabilities
2 published CVEs name oasdiff among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-53507
oasdiff actions resolve external $refs by default, enabling SSRF and disclosure of structured files on pull-request runs
oasdiff · oasdiff-action
High8.3 - CVE-2026-53508
oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)
oasdiff · oasdiff
Medium6.0