Oasdiff vulnerabilities

Newest

• oasdiff oasdiff-action oasdiff actions resolve external $refs by default, enabling SSRF and disclosure of structured files on pull-request runs CVE-2026-53507 8.3 HighAugust 31, 2026
• oasdiff oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read) CVE-2026-53508 Fix available 6.0 MediumJuly 7, 2026