From 758581ff1020b5628f90e8103575365131320f24 Mon Sep 17 00:00:00 2001
From: hablnu <hablnu@visa.com>
Date: Wed, 10 Jun 2026 11:45:01 +0530
Subject: [PATCH 1/2] GENAI=YES|Fixed a security finding

---
 lib/apicontrollersbase.js | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/apicontrollersbase.js b/lib/apicontrollersbase.js
index 613b51a..3bb4370 100644
--- a/lib/apicontrollersbase.js
+++ b/lib/apicontrollersbase.js
@@ -112,10 +112,12 @@ class APIOperationBase {
 				callback();
 			} else {
 				logger.error("Undefined Response");
+				callback();
 			}
 		}).catch(error => {
 			obj._error = error;
 			logger.error(error);
+			callback();
 		});
 
 		logger.debug('Exit APIOperationBase execute');

From 6d48451786afe4b937897d97b570c938fe26eb49 Mon Sep 17 00:00:00 2001
From: hablnu <hablnu@visa.com>
Date: Wed, 10 Jun 2026 12:48:24 +0530
Subject: [PATCH 2/2] GENAI=YES|Fix

---
 lib/apicontrollersbase.js | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/lib/apicontrollersbase.js b/lib/apicontrollersbase.js
index 3bb4370..1b11efe 100644
--- a/lib/apicontrollersbase.js
+++ b/lib/apicontrollersbase.js
@@ -88,6 +88,7 @@ class APIOperationBase {
 		this.setClientId();
 
 		var obj = this;
+		var callbackInvoked = false;
 
 		logger.debug(JSON.stringify(this._request, 2, null));
 
@@ -109,15 +110,17 @@ class APIOperationBase {
 				var responseObj = JSON.parse(JSON.stringify(response.data));
 				logger.debug(JSON.stringify(responseObj, 2, null));
 				obj._response = responseObj;
-				callback();
 			} else {
 				logger.error("Undefined Response");
-				callback();
 			}
-		}).catch(error => {
+		}, (error) => {
 			obj._error = error;
 			logger.error(error);
-			callback();
+		}).finally(() => {
+			if (!callbackInvoked) {
+				callbackInvoked = true;
+				callback();
+			}
 		});
 
 		logger.debug('Exit APIOperationBase execute');