The swagger-typescript-api tool, used to generate API clients from OpenAPI specifications, had a vulnerability in versions before 13.12.2. Specifically, the src/resolved-swagger-schema.ts file's getRemoteRequestHeaders function forwarded the --authorizationToken to every URL fetched by fetchRemoteSchemaDocument during the warmUpRemoteSchemasCache process. This behavior allowed an attacker who could supply a malicious OpenAPI spec to cause the developer's or CI's bearer token to be sent to an external, cross-origin endpoint, resulting in exposure of sensitive information. The vulnerability is addressed by updating to version 13.12.2 where this token forwarding behavior is corrected.

An attacker able to supply a malicious OpenAPI specification can cause the bearer token used for authorization to be leaked to an external endpoint. This exposure compromises confidentiality of sensitive tokens, potentially allowing unauthorized access to protected resources. The vulnerability does not impact integrity or availability directly but poses a significant risk due to token theft.

Upgrade swagger-typescript-api to version 13.12.2 or later, where this vulnerability is fixed. There is no indication of alternative mitigations or temporary workarounds. Patch status is not explicitly stated in the vendor advisory, but the description confirms the fix is included in version 13.12.2.