Lucene search
+L

1 matches found

Veracode
Veracode
•added 2026/01/27 10:02 a.m.•15 views

Arbitrary Command Injection

@orval/core is vulnerable to Arbitrary Command Injection. The vulnerability is due to improper handling and escaping of untrusted OpenAPI specification data in the x-enumDescriptions field during enum generation, which allows an attacker to inject and execute arbitrary TypeScript or JavaScript co...

9.8CVSS6.4AI score0.00845EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder