{"vulnerability": "CVE-2026-72717", "sightings": [{"uuid": "143e43cf-4f03-4ea4-afd1-1ebd97431b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtodwd5oay2m", "content": "CVE-2026-72717\nIf you use Orval versions before 8.21.0 to create TypeScript clients, specially crafted default values in an API description can cause malicious JavaScript to run when the generated code is loaded. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:10:03.925714Z"}, {"uuid": "90b7b5b4-e126-40be-b66d-9636c53f1d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d7lnttnkdepzd", "content": "CVE-2026-72717 - Orval: Import-time RCE via schema default -> zod module-level template literal\nCVE ID : CVE-2026-72717\n \n Published : Aug. 19, 2026, 6:17 p.m. | 13\u00a0minutes ago\n \n Description : Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swag...", "creation_timestamp": "2026-08-19T18:53:42.745508Z"}, {"uuid": "81adfc9d-e63a-49d8-aae5-77647c70c8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthk33bcry2t", "content": "\ud83d\udea8 CVE-2026-72717 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72717\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:11:27.369298Z"}, {"uuid": "a072684c-bf13-4432-a954-4887584bc86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72717", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthz3f7jye2m", "content": "CVE-2026-72717 - orval\nA security risk exists in Orval's code generation for OpenAPI and Swagger specifications. If not updated to version 8.21.0 or later, malicious code can be executed when the generated\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:40:03.950833Z"}]}