tag
Code-Generation
High
Orval OpenAPI Codegen Arbitrary Code Execution via Malicious Spec (CVE-2026-23947)
CVE-2026-23947·
Orval (OpenAPI-to-TypeScript client generator), version 7.10.0
patched
Critical
Handlebars AST Injection Remote Code Execution — CVE-2026-33937
CVE-2026-33937·
Handlebars (Node.js templating engine)
patched