Login Request a demo
OR
Product
Orpc
by Orpc · last CVE Mar 24, 2026
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 0Medium 1Low 0
Severity
All severities2Critical1High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Orpc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-28794
9.8
1%
Mar 6
oRPC: Prototype Pollution in `@orpc/client` via `StandardRPCJsonSerializer` Deserialization
Affected: before 1.13.6
CVE-2026-33331
5.4
0%
Mar 24
oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify
Affected: before 1.13.9
Showing 2