{"uuid": "d8a7ebdc-55d5-4ac6-a5f2-d7f8b1e90560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7ytr7wkn2i", "content": "CVE-2026-96755 - orval\nThe @orval/effect part of orval (versions 8.14.0 to 8.28.1) can execute malicious JavaScript that an attacker embeds in an API description. This happens when the tool turns certain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-09-24T00:30:05.758287Z"}