What’s Vulnerable › Products

oasdiff-action vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your oasdiff-action version is affected

Latest oasdiff-action vulnerabilities

• CVE-2026-53507 — oasdiff actions resolve external $refs by default, enabling SSRF and disclosure of structured files on pull-request runs (CVSS 8.3)