CVE-2026-25141 | orval-labs orval up to 7.20.x/8.1.x Incomplete Fix CVE-2026-23947 jsStringEscape code injection (GHSA-gch2-phqh-fg9q)

A vulnerability was found in orval-labs orval up to 7.20.x/8.1.x. It has been rated as critical. Affected by this issue is the function jsStringEscape of the component Incomplete Fix CVE-2026-23947. The manipulation leads to code injection.

This vulnerability is listed as CVE-2026-25141. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.