CVE-2026-63346 - Refitter: C# source injection through OpenAPI header parameter names
CVE ID :CVE-2026-63346 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter name in `parameters[].name` with `in: header` is emitted verbatim into a Refit...