Product

Orval (8.14.0 - 8.28.1)

1 brief RSS

Code Injection Vulnerability in Orval @orval/effect Generator

Versions 8.14.0 through 8.28.1 of Orval contain a code injection vulnerability allowing arbitrary JavaScript execution via malicious OpenAPI schema defaults.

orval +1 supply-chain code-injection vulnerability

2t 1c 1h ago