openapi-generators vulnerabilities and threats

CVE-2026-105801 is a code injection vulnerability in openapi-python-client versions prior to 0.29.1. The tool generates Python clients from OpenAPI documents but does not safely neutralize malicious content in string, docstring, and f-string contexts. This allows attacker-controlled Python code to be included in the generated client, which executes upon import, potentially compromising the importing environment's integrity, confidentiality, and availability. The issue is fixed in version 0.29.1.