Skip to content
OpenAdvisories

Vendor

middleapi

5 known vulnerabilities.

Products

orpc 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-28794

    oRPC: Prototype Pollution in `@orpc/client` via `StandardRPCJsonSerializer` Deserialization

    oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.6, a prototype pollution vulnerability exists in the RPC JSON deserializer of the @orpc/client package. The vulnerability allows unauthe…

    middleapi orpc @orpc/client npm