CVE-2026-33331

CVE-2026-33331 — Хранимый XSS в плагине OpenAPI Reference в oRPC Лабораторный стенд для воспроизведения хранимого XSS в генерации документации OpenAPI в orpc Назначение oRPC строит страницы документации API на основе спецификации OpenAPI. До версии v1.13.9 он вставлял спецификацию напрямую в тег ...

CVE-2026-33331

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.9, a stored cross-site scripting XSS vulnerability exists in the OpenAPI documentation generation of orpc. If an attacker can control any field within the OpenAPI specificati...

CVE-2026-33331

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.9, a stored cross-site scripting XSS vulnerability exists in the OpenAPI documentation generation of orpc. If an attacker can control any field within the OpenAPI specificati...