PatchTheCVEorval vulnerabilities
Recent CVEs affecting orval products. 2 tracked.
orval has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-23. Highest priority: CVE-2026-22785 (score 61/100).
- CVE-2026-24132 CRITICAL 9.8 UPGRADE Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification
- CVE-2026-22785 CRITICAL 9.8 UPGRADE orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification
FAQ
How do I fix orval vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is orval being exploited right now?
None of the tracked orval CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which orval CVE should I patch first?
CVE-2026-22785 currently ranks highest (61/100): orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification.