@orval/mcp vulnerabilities (npm)

1 vulnerability.

• @orval/mcp npm orval MCP client is vulnerable to a code injection attack. CVE-2026-22785 Public exploitFix available 9.3 CriticalJanuary 12, 2026