CRITICALnpm
GHSA-mwr6-3gp8-9jmj· CVE-2026-22785orval MCP client is vulnerable to a code injection attack.
Modified: 2/3/2026
package
npm/@orval/mcp
pkg:npm/%40orval/mcp
package
pkg:npm/%40orval/mcp
orval MCP client is vulnerable to a code injection attack.
Modified: 2/3/2026