CVE-2026-63325 | redocly redocly-cli up to 2.32.2 Arazzo Faker Runtime Expression get-value-from-context.ts code injection (GHSA-xw2f-5386-m542)

A vulnerability classified as critical was found in redocly redocly-cli up to 2.32.2. The affected element is an unknown function of the file packages/respect-core/src/modules/context-parser/get-value-from-context.ts of the component Arazzo Faker Runtime Expression Handler. Executing a manipulation can lead to code injection.

The identification of this vulnerability is CVE-2026-63325. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.