OR
Product
Orval
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 0Medium 0Low 0
Watch
Add Orval to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25141 | 9.8 | Jan 30 | Orval has a code injection via unsanitized x-enum-descriptions uing JS comments Affected: 7.19.0 before 7.21.0; 8.0.0 before 8.2.0 |
| CVE-2026-24132 | 9.8 | Jan 22 | Orval Mock Generation Code Injection via const Affected: 6.0.0 before 7.20.0; 8.0.0 before 8.0.3 |
| CVE-2026-23947 | 9.8 | Jan 20 | Orval MCP client is vulnerable to code injection via unsanitized x-enum-descriptions in enum generation Affected: before 7.19.0; 8.0.0 before 8.0.2 |
| CVE-2026-22785 | 9.8 | Jan 12 | orval MCP client is vulnerable to a code injection attack. Affected: before 7.18.0 |
Showing 4