Security
فارسی
All products

orval

npm · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)CVE-2026-62681 · GHSA-FG9P-MRXR-HVQ7 orval npm Critical Fix reported
Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)CVE-2026-62682 · GHSA-88F2-FPV8-89Q2 orval npm Critical Fix reported
Orval: Import-time RCE via schema default -> zod module-level template literalCVE-2026-72717 · GHSA-W727-8J6C-2RJ4 orval npm Critical Fix reported
Orval: Import-time RCE via array-items default -> zod module-level template literalCVE-2026-71869 · GHSA-2H9G-J24R-H63G orval npm Critical Fix reported
Orval: Import-time RCE via enum-typed default -> zod module-level template literalCVE-2026-71868 · GHSA-3575-W9FC-C2J6 orval npm Critical Fix reported
Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cliCVE-2026-71865 · GHSA-653Q-5476-X79G orval npm Critical Fix reported
Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod clientCVE-2026-71864 · GHSA-6437-GXHQ-PQV8 orval npm Critical Fix reported
Orval: Import-time RCE via header-parameter default -> zod module-level template literalCVE-2026-71871 · GHSA-8J6P-R8JG-MXQH orval npm Critical Fix reported
Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generatorCVE-2026-71867 · GHSA-2W86-XFRC-G85R orval npm Critical Fix reported
Orval: Import-time RCE via query-parameter default -> zod module-level template literalCVE-2026-72716 · GHSA-P4CG-3328-RVFG orval npm Critical Fix reported
Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod clientCVE-2026-71866 · GHSA-6MR6-JVCR-2F25 orval npm Critical Fix reported
Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $refCVE-2026-62680 · GHSA-CXQ5-97V7-87J8 orval npm High Fix reported