Lucene search
+L

5 matches found

Veracode
Veracode
added 2026/01/19 9:44 a.m.9 views

Arbitrary Command Injection

@orval/mcp is vulnerable to Arbitrary Command Injection. The vulnerability is due to improper validation and escaping of the OpenAPI specification summary field during MCP server generation, which allows an attacker to break out of string literals and inject arbitrary code...

9.8CVSS5.6AI score0.0071EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder