Skip to content

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

Critical severity GitHub Reviewed Published Jul 12, 2026 in orval-labs/orval • Updated Sep 2, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts