{"metadata": {"vulnerability": "CVE-2026-96756", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-07T00:00:00Z", "date_only": false, "value": "2026-09-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-96756", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-23T15:58:25.631Z", "date_only": false, "value": "2026-09-23T15:58:25.631Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-96756", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-23T16:23:53.491Z", "date_only": false, "value": "2026-09-23T16:23:53.491Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-96756", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-23T16:23:53.491Z", "date_only": false, "value": "2026-09-23T16:23:53.491Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-96756", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-23T17:17:24Z", "date_only": false, "value": "2026-09-23T17:17:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J4VV-V4C9-8599", "record": "GHSA-J4VV-V4C9-8599", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-23T17:17:24.767Z", "date_only": false, "value": "2026-09-23T17:17:24.767", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96756", "record": "FKIE_CVE-2026-96756", "field": "published"}, {"timestamp": "2026-09-23T18:08:51.785Z", "date_only": false, "value": "2026-09-23T18:08:51.785649Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7dk3uzw72k", "record": "CVE-2026-96756", "field": "creation_timestamp", "uuid": "a3f1f23e-49e1-4df0-a183-84c4575eaa30", "content": "\ud83d\udea8 CVE-2026-96756 \u2014 CVSS 9.2 CRITICAL\n\norval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96756\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7dk3uzw72k"}, {"timestamp": "2026-09-23T18:11:23.190Z", "date_only": false, "value": "2026-09-23T18:11:23.190187Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96756", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-23T18:11:23.190Z", "date_only": false, "value": "2026-09-23T18:11:23.190187Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96756", "record": "FKIE_CVE-2026-96756", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-23T18:31:57Z", "date_only": false, "value": "2026-09-23T18:31:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J4VV-V4C9-8599", "record": "GHSA-J4VV-V4C9-8599", "field": "published"}, {"timestamp": "2026-09-23T18:31:57Z", "date_only": false, "value": "2026-09-23T18:31:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J4VV-V4C9-8599", "record": "GHSA-J4VV-V4C9-8599", "field": "modified"}, {"timestamp": "2026-09-23T18:37:54.971Z", "date_only": false, "value": "2026-09-23T18:37:54.971320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j346ltswyr6a2", "record": "CVE-2026-96756", "field": "creation_timestamp", "uuid": "5f6ee7e2-2342-4e46-8f15-587945b9850d", "content": "CVE-2026-96756 - orval before 8.30.0 Code Injection via Factory Generation\nCVE ID : CVE-2026-96756\n \n Published : Sept. 23, 2026, 5:17 p.m. | 43\u00a0minutes ago\n \n Description : orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generato...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/j346ltswyr6a2"}, {"timestamp": "2026-09-23T19:44:36.697Z", "date_only": false, "value": "2026-09-23T19:44:36.697Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-96756", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-23T19:44:36.697Z", "date_only": false, "value": "2026-09-23T19:44:36.697Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96756", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-23T20:17:27.057Z", "date_only": false, "value": "2026-09-23T20:17:27.057", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96756", "record": "FKIE_CVE-2026-96756", "field": "lastModified"}, {"timestamp": "2026-09-24T00:10:04.917Z", "date_only": false, "value": "2026-09-24T00:10:04.917796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7xpysirb2f", "record": "CVE-2026-96756", "field": "creation_timestamp", "uuid": "87b42079-1714-4236-bc60-3689d29de347", "content": "CVE-2026-96756 - orval\nVersions of the orval tool released before 8.30.0 can be tricked into executing unwanted commands when it processes certain API specifications. By inserting special characters into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7xpysirb2f"}]}
