Code-Generation — PoC Archivehttps://poc.intelseclab.com/tags/code-generation/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Orval OpenAPI Codegen Arbitrary Code Execution via Malicious Spec (CVE-2026-23947)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-23947-orval-codegen-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-23947-orval-codegen-rce/High severity — misc · CVE-2026-23947. Status: PoC. Affects: Orval (OpenAPI-to-TypeScript client generator), version 7.10.0. Tags: orval, openapi, code-generation, arbitrary-code-execution, nodejs, supply-chain, typescript, build-tooling.miscHighorvalopenapicode-generationarbitrary-code-executionnodejssupply-chaintypescriptbuild-toolingHandlebars AST Injection Remote Code Execution — CVE-2026-33937https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33937-handlebars-ast-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33937-handlebars-ast-rce/Critical severity — web · CVE-2026-33937. Status: PoC. Affects: Handlebars (Node.js templating engine). Tags: handlebars, rce, template-injection, ast-injection, nodejs, express, javascript-compiler, code-generation.webCriticalhandlebarsrcetemplate-injectionast-injectionnodejsexpressjavascript-compilercode-generation