{"action":"Upgrade @orval/mock to 7.20.0 or later.","affected":[{"fixed":"7.20.0","introduced":"0"},{"fixed":"8.0.3","introduced":"8.0.0-rc.0"}],"component":"@orval/mock","cve_ids":["CVE-2026-24132"],"ecosystem":"npm","epss":0.00736,"exploited":false,"fixed_versions":["7.20.0","8.0.3"],"ghsa_id":"GHSA-f456-rf33-4626","id":"tcs_01M5KFMDQSSVBNG0V4XYD1ZKTV","modified_at":"2026-02-28T06:27:01.410338Z","published_at":"2026-01-22T18:09:13Z","references":["https://osv.dev/vulnerability/GHSA-f456-rf33-4626","https://github.com/orval-labs/orval/security/advisories/GHSA-f456-rf33-4626","https://nvd.nist.gov/vuln/detail/CVE-2026-24132","https://github.com/orval-labs/orval/pull/2828","https://github.com/orval-labs/orval/pull/2829","https://github.com/orval-labs/orval/pull/2830","https://github.com/orval-labs/orval/commit/44ca8c1f5f930a3e4cefb6b79b38bcde7f8532a5","https://github.com/orval-labs/orval/commit/6d8ece07ccb80693ad43edabccb3957aceadcd06","https://github.com/orval-labs/orval/commit/9b211cddc9f009f8a671e4ac5c6cb72cd8646b62","https://github.com/orval-labs/orval","https://github.com/orval-labs/orval/releases/tag/v7.20.0","https://github.com/orval-labs/orval/releases/tag/v8.0.3"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-f456-rf33-4626","url":"https://osv.dev/vulnerability/GHSA-f456-rf33-4626"}],"summary":"Orval Mock Generation Code Injection via const"}