Product

Orval (< 8.22.0)

1 brief RSS

Orval OpenAPI $ref Resolver SSRF and File Inclusion

Orval versions prior to 8.22.0 contain a vulnerability in the OpenAPI $ref resolver allowing build-time SSRF, remote file inclusion, and local file inclusion via crafted specification files.

Orval vulnerability ssrf file-inclusion supply-chain

1c 1h ago