Products: 1
Vulnerabilities: 5
Known Exploited: 0
1
Critical Level Threats
1
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-103918
@orpc/zod: Prototype injection in smart coercion
Last Modified: Oct 05, 2026
Published: Oct 02, 2026
CVE-2026-103036
@orpc/json-schema: Prototype injection in smart coercion
Last Modified: Oct 05, 2026
Published: Oct 02, 2026
CVE-2026-77360
oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass
Last Modified: Sep 18, 2026
Published: Sep 16, 2026
CVE-2026-33331
oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify
Last Modified: Mar 27, 2026
Published: Mar 24, 2026
CVE-2026-28794
oRPC: Prototype Pollution in `@orpc/client` via `StandardRPCJsonSerializer` Deserialization
Last Modified: Apr 16, 2026
Published: Mar 06, 2026
Items Per Page
