npm/@orval/mock CVE-2026-24132: high, EPSS 0.74%
Orval Mock Generation Code Injection via const
Action: Upgrade @orval/mock to 7.20.0 or later.
npm i @orval/mock@7.20.0npm i @orval/mock@8.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.20.0 | - |
| 8.0.0-rc.0 | 8.0.3 | - |
Fixed versions
| 7.20.0 | 8.0.3 |
Sources
- osv: GHSA-f456-rf33-4626
- https://github.com/orval-labs/orval/security/advisories/GHSA-f456-rf33-4626
- https://nvd.nist.gov/vuln/detail/CVE-2026-24132
- https://github.com/orval-labs/orval/pull/2828
- https://github.com/orval-labs/orval/pull/2829
- https://github.com/orval-labs/orval/pull/2830
- https://github.com/orval-labs/orval/commit/44ca8c1f5f930a3e4cefb6b79b38bcde7f8532a5
- https://github.com/orval-labs/orval/commit/6d8ece07ccb80693ad43edabccb3957aceadcd06
- https://github.com/orval-labs/orval/commit/9b211cddc9f009f8a671e4ac5c6cb72cd8646b62
- https://github.com/orval-labs/orval
- https://github.com/orval-labs/orval/releases/tag/v7.20.0
- https://github.com/orval-labs/orval/releases/tag/v8.0.3
CVE-2026-24132 · published · modified · JSON