Skip to content
OpenAdvisories

Package · npm

@orval/mock

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.7
    CVE-2026-24132

    Orval Mock Generation Code Injection via const

    Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions 7.19.0 and below and 8.0.0-rc.0 through 8.0.2 allow untrusted OpenAPI specifications to inject arbitrary TypeScript/JavaScript into generated moc…

    orval-labs orval @orval/mock npm