Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/09/03 6:20 p.m.•15 views

Orval: Import-time RCE via enum-typed default -> zod module-level template literal

Summary Orval's zod schema generation emits the enum-typed default value as a module-level template literal export const …Default = ; without escaping $ or the backtick. A default of the form v$w injects a live JavaScript expression evaluated when the generated zod schema module is imported,...

9.3CVSS6AI score0.00653EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder