CVE-2026-23947 | orval up to 8.0.1 getEnumImplementation enumDescriptions command injection (GHSA-h526-wf6g-67jv)

January 20, 2026 Yanac

A vulnerability was found in orval up to 8.0.1. It has been classified as critical. Affected by this vulnerability is the function getEnumImplementation. Performing a manipulation of the argument enumDescriptions results in command injection.

This vulnerability was named CVE-2026-23947. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More