CVE-2026-103918
1 advisory.
npm/@orpc/zod CVE-2026-103918: medium 6.5
@orpc/zod: Prototype injection in smart coercion
Action: Upgrade @orpc/zod to 1.14.10 or later.
npm i @orpc/zod@1.14.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.10 | - |
Fixed versions
| 1.14.10 |
Sources
- osv: GHSA-gcgf-fh7c-8gf2
- https://github.com/middleapi/orpc/security/advisories/GHSA-gcgf-fh7c-8gf2
- https://nvd.nist.gov/vuln/detail/CVE-2026-103918
- https://github.com/middleapi/orpc/pull/1727
- https://github.com/middleapi/orpc/commit/26314dfb443237c495116c5794d3d30a7a22c570
- https://github.com/middleapi/orpc
- https://github.com/middleapi/orpc/releases/tag/v1.14.10
CVE-2026-103918 · published · modified · JSON