orpc vulnerabilities

1 known vulnerability in orpc from Middleapi. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  orpc: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-28794Mar 6, 2026MiddleapiEPSS 1.06%

  oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.13.6, a prototype pollution vulnerability exists in the RPC JSON deserializer of the @orpc/client package. The vulnerability allows unauthen