CVE-2026-63184

Name of the Vulnerable Software and Affected Versions Refitter versions prior to 2.1.1

Description The refitter dotnet tool uses NJsonSchema with unsafe defaults for $ref resolution when generating Refit interfaces and contracts from OpenAPI descriptions. If an attacker controls or influences these descriptions, they can trigger server-side request forgery (SSRF) by using remote http(s) references, causing the developer or CI host to make requests and inline remote schema content. Additionally, the use of absolute local file paths or relative ../ traversal allows the resolution and inlining of local content, leading to arbitrary local-file disclosure.

Recommendations Update to version 2.1.1.