How many CVEs have a located fix in orval-labs/orval?

21 published CVEs have a fix traced to functions in orval-labs/orval, touching 35 functions across 23 files.

Which function in orval-labs/orval has been patched by the most CVEs?

map in packages/zod/src/index.ts has been changed by 11 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in orval-labs/orval?

The median fix changes 107 lines. 5% of fixes change 20 lines or fewer, and 5% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

typescript

#249 of 500 repositories

orval-labs/orval

Name: orval-labs/orval: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 23, 2026

21

CVE fixes located

Published CVEs

35

Functions patched

Distinct function sites

23

Files patched

Distinct source files

2026

Years covered

By CVE publication date

Overview

21 published CVEs have a fix traced to functions in orval-labs/orval, the earliest published in 2026. Those fixes changed 35 distinct functions across 23 files, in 431 patch hunks.

Among the 500 repositories tracked here, orval-labs/orval ranks #249 by the number of CVEs with a located fix.

Most patched functions

Functions in orval-labs/orval changed by the most CVE fixes.

Most patched files

Files in orval-labs/orval changed by the most CVE fixes.

1packages/zod/src/index.ts13 CVEs · 3 functions
2packages/query/src/mutation-generator.ts12 CVEs · 2 functions
3packages/core/src/getters/route.ts11 CVEs · 4 functions
4packages/core/src/getters/keys.ts11 CVEs · 1 functions
5packages/core/src/generators/options.ts2 CVEs · 3 functions
6packages/core/src/getters/res-req-types.ts2 CVEs · 2 functions
7packages/hono/src/index.ts2 CVEs · 1 functions
8packages/effect/src/index.ts2 CVEs · 0 functions
9packages/mock/src/faker/getters/scalar.ts1 CVEs · 3 functions
10packages/angular/src/http-client.ts1 CVEs · 2 functions

Fix size

How much code a CVE fix in orval-labs/orval changes, with backports counted once.

107

Median lines changed

Added plus removed, per CVE

5%

Fixes of 20 lines or fewer

Share of CVE fixes

5%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in orval-labs/orval, and the functions each fix changed.

orval before 8.29.0 Code Injection via operationId
CVE-2026-96759NormalizedTarget GeneratorMutator
Critical · CVSS 9.3
EPSS 0.4%2026-09-23
orval @orval/core before 8.28.0 Code Injection via Form-Data
CVE-2026-96758resolveSchemaPropertiesToFormData replace
Critical · CVSS 9.3
EPSS 0.5%2026-09-23
orval before 8.29.0 Code Injection via unescaped OpenAPI media-type
CVE-2026-96757map getBodiesByContentType generateDefinition
Critical · CVSS 9.3
EPSS 0.6%2026-09-23
orval before 8.30.0 Code Injection via Factory Generation
CVE-2026-96756buildDefaultPayload
Critical · CVSS 9.2
EPSS 0.5%2026-09-23
orval @orval/effect 8.14.0 through 8.28.1 Code Injection
CVE-2026-96755NormalizedMutator
Critical · CVSS 9.3
EPSS 0.4%2026-09-23
orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path
CVE-2026-96754NormalizedMutator
Critical · CVSS 9.3
EPSS 0.4%2026-09-23
Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref
CVE-2026-62680InputOptions NormalizedInputOptions filterParams
High · CVSS 7.1
EPSS 0.4%2026-08-19
Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)
CVE-2026-62682getRoute runtimeExpressionToUrlPrefix formatDefaultValue
Critical · CVSS 9.3
EPSS 0.7%2026-08-19
Orval: Import-time RCE via schema default -> zod module-level template literal
CVE-2026-72717getRoute runtimeExpressionToUrlPrefix formatDefaultValue
Critical · CVSS 9.3
EPSS 0.7%2026-08-19
Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator
CVE-2026-71867getRoute runtimeExpressionToUrlPrefix formatDefaultValue
Critical · CVSS 9.3
EPSS 0.7%2026-08-19
Orval: Import-time RCE via enum-typed default -> zod module-level template literal
CVE-2026-71868getRoute runtimeExpressionToUrlPrefix formatDefaultValue
Critical · CVSS 9.3
EPSS 0.7%2026-08-19
Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli
CVE-2026-71865getRoute runtimeExpressionToUrlPrefix formatDefaultValue
Critical · CVSS 9.3
EPSS 0.7%2026-08-19

Get an alert for each new orval-labs/orval CVE, with the patched functions and AI-written analysis.

Monitor orval CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

debian/libvirt21 CVEs debian/libxml221 CVEs ethyca/fides21 CVEs flatpressblog/flatpress21 CVEs francoisjacquet/rosariosis21 CVEs FreshRSS/FreshRSS21 CVEs huggingface/transformers21 CVEs ILIAS-eLearning/ILIAS21 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in orval-labs/orval.

How many CVEs have a located fix in orval-labs/orval?: 21 published CVEs have a fix traced to functions in orval-labs/orval, touching 35 functions across 23 files.
Which function in orval-labs/orval has been patched by the most CVEs?: map in packages/zod/src/index.ts has been changed by 11 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in orval-labs/orval?: The median fix changes 107 lines. 5% of fixes change 20 lines or fewer, and 5% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track orval-labs/orval CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing