Lucene search
+L

2 matches found

OSV
OSV
added 2026/03/06 5:2 a.m.7 views

CVE-2026-28794 oRPC: Prototype Pollution in `@orpc/client` via `StandardRPCJsonSerializer` Deserialization

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.6, a prototype pollution vulnerability exists in the RPC JSON deserializer of the @orpc/client package. The vulnerability allows unauthenticated, remote attackers to inject...

9.3CVSS6AI score0.0091EPSS
SaveExploits1References4
Rows per page
Query Builder