orval-labs orval
6 known vulnerabilities in orval-labs orval, 6 critical, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-96759 CVSS 9.3 critical orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata…
- CVE-2026-96758 CVSS 9.3 critical orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart…
- CVE-2026-96757 CVSS 9.3 critical orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in…
- CVE-2026-96756 CVSS 9.2 critical orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default…
- CVE-2026-96755 CVSS 9.3 critical orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema…
- CVE-2026-96754 CVSS 9.3 critical orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape OpenAPI path values…