Advisory Catalog

Orval: Import-time RCE via array-items default -> zod module-level template literal

Orval: Import-time RCE via enum-typed default -> zod module-level template literal

Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on [becoming the maintainer of a project that is unsupported for security reasons](htt

TrueConf Server Code Injection Vulnerability

TrueConf Server Missing Authentication for Critical Function Vulnerability

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on [becoming the maintainer of a project that is unsupported for security reasons](htt

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on [becoming the maintainer of a project that is unsupported for security reasons](htt

Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()

Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems

Grav: Authenticated ReDoS via regex_replace in Twig Sandbox

Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)

Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits

stigmem-node has blind SSRF via unvalidated webhook subscription delivery_address

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability