{"vulnerability": "CVE-2026-96756", "sightings": [{"uuid": "a3f1f23e-49e1-4df0-a183-84c4575eaa30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96756", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7dk3uzw72k", "content": "\ud83d\udea8 CVE-2026-96756 \u2014 CVSS 9.2 CRITICAL\n\norval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96756\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T18:08:51.785649Z"}, {"uuid": "5f6ee7e2-2342-4e46-8f15-587945b9850d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j346ltswyr6a2", "content": "CVE-2026-96756 - orval before 8.30.0 Code Injection via Factory Generation\nCVE ID : CVE-2026-96756\n \n Published : Sept. 23, 2026, 5:17 p.m. | 43\u00a0minutes ago\n \n Description : orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generato...", "creation_timestamp": "2026-09-23T18:37:54.971320Z"}, {"uuid": "87b42079-1714-4236-bc60-3689d29de347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96756", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7xpysirb2f", "content": "CVE-2026-96756 - orval\nVersions of the orval tool released before 8.30.0 can be tricked into executing unwanted commands when it processes certain API specifications. By inserting special characters into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-09-24T00:10:04.917796Z"}]}