Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@orpc/openapi
@orpc/openapi vulnerabilities (npm)
1 vulnerability.
@orpc/openapi
npm
oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify
CVE-2026-33331
Public exploit
Fix available
8.2
High
March 20, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open