AIKIDO-2026-739977

TL;DR

@asyncapi/generator can map a remote schema base URL to a local folder so $refs are resolved from disk. The resolver builds the local file path by string-replacing the base URL prefix with the mapped folder and reads it without normalizing the result or confirming it stays inside that folder. A malicious AsyncAPI document can use ../ traversal sequences, or a symlink planted under the mapped folder, to make the resolver read files outside the intended directory and pull their contents into the generation process. The fix canonicalizes the resolved path and rejects any reference that escapes the mapped base folder.