{"vulnerability": "CVE-2026-71865", "sightings": [{"uuid": "cca2a9c2-8ed1-4a1b-ac41-0c47d09fdaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtodehz5so2c", "content": "CVE-2026-71865\nIf you use Orval versions before 8.21.0 to generate client code, a specially crafted query parameter name can cause malicious JavaScript to run when the generated files are loaded. This can affect developers,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:00:04.509000Z"}, {"uuid": "762ab0be-b533-41ee-8cd9-304667ec7996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjz7ezrk25", "content": "\ud83d\udea8 CVE-2026-71865 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71865\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:24.459888Z"}, {"uuid": "78e49fab-2fcf-4371-b343-e3dd7a0e0a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthxfqpygz23", "content": "CVE-2026-71865 - orval\nA security issue in Orval allows attackers to inject malicious JavaScript code when using certain query parameters. This can lead to code execution in the developer, CI, or application\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:10:04.882965Z"}]}