5 matches found
Arbitrary Command Injection
@orval/mcp is vulnerable to Arbitrary Command Injection. The vulnerability is due to improper validation and escaping of the OpenAPI specification summary field during MCP server generation, which allows an attacker to break out of string literals and inject arbitrary code...
9.8CVSS5.6AI score0.0071EPSS
SaveExploits2References3Affected Software1
20