tag

Orpc

oRPC OpenAPI Reference Plugin Stored XSS via Unescaped Spec Embedding (CVE-2026-33331)

CVE-2026-33331 (GHSA-7f6v-3gx7-27q8)· middleapi/orpc — OpenAPI documentation reference plugin (packages/openapi/src/plugins/openapi-reference.ts) patched