Advisories · Technology

orval.

Every CVE that names orval among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96759 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

orval before 8.29.0 Code Injection via operationId
- orval
- Code injection
Not analysed yet 23 Sept 2026
CVE-2026-96758 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

orval @orval/core before 8.28.0 Code Injection via Form-Data
- orval
- Code injection
Not analysed yet 23 Sept 2026
CVE-2026-96757 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

orval before 8.29.0 Code Injection via unescaped OpenAPI media-type
- orval
- Code injection
Not analysed yet 23 Sept 2026
CVE-2026-96756 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

orval before 8.30.0 Code Injection via Factory Generation
- orval
- Code injection
Not analysed yet 23 Sept 2026
CVE-2026-96755 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

orval @orval/effect 8.14.0 through 8.28.1 Code Injection
- orval
- Code injection
Not analysed yet 23 Sept 2026
CVE-2026-96754 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path
- orval
- Code injection
Not analysed yet 23 Sept 2026