Skip to content
OpenAdvisories

Vendor

middleapi

5 known vulnerabilities.

Products

orpc 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-33331 Public exploit

    oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify

    oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.9, a stored cross-site scripting (XSS) vulnerability exists in the OpenAPI documentation generation of orpc. If an attacker can control …

    middleapi orpc @orpc/openapi npm