CVE-2026-71871 | orval-labs Orval up to 8.20.x Zod Schema Generation index.ts formatDefaultValue header code injection

August 19, 2026 Yanac

A vulnerability classified as problematic has been found in orval-labs Orval up to 8.20.x. This impacts the function formatDefaultValue of the file packages/zod/src/index.ts of the component Zod Schema Generation. This manipulation of the argument header causes code injection.

The identification of this vulnerability is CVE-2026-71871. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More