Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

orval

npm

A swagger client generator for typescript

View on github.com · View on npmjs.org

Security Advisories for orval in npm

High
about 8 hours ago

Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref GSA_kwCzR0hTQS1jeHE1LTk3djctODdqOM4ABodT

npm orval
Critical
about 8 hours ago

Orval: Import-time RCE via query-parameter default -> zod module-level template literal GSA_kwCzR0hTQS1wNGNnLTMzMjgtcnZmZ84ABodS

npm orval
Critical
about 8 hours ago

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client GSA_kwCzR0hTQS02bXI2LWp2Y3ItMmYyNc4ABodR

npm orval

Filter by Severity

Critical 2 High 1