orpc vulnerabilities
CVEs whose affected-version data names the orpc package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-103036Medium· 6.5oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards
oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the @orpc/json-schema SmartCoercionPlugin uses JsonSchemaCoercer to collect object properties in a plain object and to r…
▾ Sunlitmiddleapi · orpcEPSS 0.23%via NVD
CVE-2026-77360Medium· 6.3PoCoRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards
oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @orpc/server CORS plugin in packages/server/src/plugins/cors.ts copies a client's incoming Vary request header into…
▾ Twilightmiddleapi · orpcEPSS 0.54%via NVD