Skip to content
Threat Feed
Subscribe

Product

Orval (< 8.21.0)

1 brief RSS
critical advisory

Remote Code Execution in Orval via Malicious Zod Schema Generation

Orval versions prior to 8.21.0 are vulnerable to remote code execution during module import due to improper sanitization of OpenAPI query parameter default values in generated Zod schemas.

Orval supply-chain rce nodejs typescript
1t 1c