@orval/angular (>=8.0.0-rc.0, <=8.0.1), @orval/axios (>=8.0.0-rc.0, <=8.0.1) +9 more potentially affected by CVE-2026-23947 +1 more via @orval/core (>=8.0.0-rc.0, <=8.0.1)

@orval/core NPM version =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.6, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.1 Source cves: CVE-2026-23947, CVE-2026-25141 Source advisory: OSV:GHSA-H526-WF6G-67JV...

@orval/angular (>=8.0.0-rc.0, <=8.0.1), @orval/axios (>=8.0.0-rc.0, <=8.0.1) +9 more potentially affected by CVE-2026-23947 via @orval/core (>=8.0.0-rc.0, <=8.0.1)

@orval/core NPM version =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.6, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.1 Source cves: CVE-2026-23947 Source advisory: GHSA-H526-WF6G-67JV...

@orval/angular (>=8.0.0-rc.0, <=8.0.1), @orval/axios (>=8.0.0-rc.0, <=8.0.1) +9 more potentially affected by CVE-2026-23947 via @orval/core (>=8.0.0-rc.0, <=8.0.1)

@orval/core NPM version =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.6, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.0-rc.0, =8.0.1 Source cves: CVE-2026-23947 Source advisory: SNYK:JS-ORVALCORE-15038726...

d2m-apigen (>=1.0.1, <=2.1.7), orval (>=7.9.0, <=7.17.2) +1 more potentially affected by CVE-2026-22785 via @orval/mcp (>=7.9.0, <=7.17.2)

@orval/mcp NPM version =7.9.0, =1.0.1, =7.9.0, =7.9.0, =7.13.2 Source cves: CVE-2026-22785 Source advisory: OSV:GHSA-MWR6-3GP8-9JMJ...

d2m-apigen (>=1.0.1, <=2.1.7), orval (>=7.9.0, <=7.17.2) +1 more potentially affected by CVE-2026-22785 via @orval/mcp (>=7.9.0, <=7.17.2)

@orval/mcp NPM version =7.9.0, =1.0.1, =7.9.0, =7.9.0, =7.13.2 Source cves: CVE-2026-22785 Source advisory: SNYK:JS-ORVALMCP-14928070...

d2m-apigen (>=1.0.1, <=2.1.7), orval (>=7.9.0, <=7.17.2) +1 more potentially affected by CVE-2026-22785 via @orval/mcp (>=7.9.0, <=7.17.2)

@orval/mcp NPM version =7.9.0, =1.0.1, =7.9.0, =7.9.0, =7.13.2 Source cves: CVE-2026-22785 Source advisory: GHSA-MWR6-3GP8-9JMJ...

CVE-2026-22785 orval MCP client is vulnerable to a code injection attack.

orval generates type-safe JS clients TypeScript from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allo...

CVE-2026-22785 orval MCP client is vulnerable to a code injection attack.

orval generates type-safe JS clients TypeScript from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allo...

CVE-2026-22785

Summary: Orval (MCP client/server code path) is vulnerable to arbitrary code execution via unsanitized input in OpenAPI specs. The CVE-2026-22785/MCP issue arises from string-manipulation in the MCP server generation logic that embeds the summary field without proper validation/escaping, allowing...

d2m-apigen (>=1.0.1, <=2.1.7), orval (>=7.9.0, <=7.17.2) +1 more potentially affected by CVE-2026-22785 via @orval/mcp (>=7.9.0, <=7.17.2)

@orval/mcp NPM version =7.9.0, =1.0.1, =7.9.0, =7.9.0, =7.13.2 Source cves: CVE-2026-22785 Source advisory: MEND:CVE-2026-22785...

CVE-2026-22785 orval MCP client is vulnerable to a code injection attack.

orval generates type-safe JS clients TypeScript from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allo...