Skip to content

Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

Critical severity GitHub Reviewed Published Jul 12, 2026 in orval-labs/orval • Updated Sep 3, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts