Lucene search
+L

1 matches found

Veracode
Veracode
added 2026/01/27 10:02 a.m.10 views

Arbitrary Command Injection

@orval/core is vulnerable to Arbitrary Command Injection. The vulnerability is due to improper handling and escaping of untrusted OpenAPI specification data in the x-enumDescriptions field during enum generation, which allows an attacker to inject and execute arbitrary TypeScript or JavaScript co...

9.8CVSS6.1AI score0.0078EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder