CVE-2026-72717 | orval-labs Orval up to 8.20.x Zod Schema Generation index.ts formatDefaultValue code injection

A vulnerability described as critical has been identified in orval-labs Orval up to 8.20.x. Affected by this vulnerability is the function formatDefaultValue of the file packages/zod/src/index.ts of the component Zod Schema Generation. Such manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-72717. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More