Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/09/02 2:52 p.m.•13 views

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

Summary orval's zod client emits each schema property name as a double-quoted key in the generated zod.object... WITHOUT escaping the double quote. A " in a property name closes the key and lands in object-literal context, where an injected computed property key expr is evaluated when zod.object...

9.3CVSS6AI score0.00653EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder