Orval Mock Generation Code Injection via const

Description

I am reporting a code injection vulnerability in Orval’s mock generation pipeline affecting @orval/mock in both the 7.x and 8.x series. This issue is related in impact to the previously reported enum x-enumDescriptions (https://github.

Recommendation

Update the @orval/mock package to the latest compatible version. Followings are version details:

• Affected version(s): **>= 8.0.0-rc.0, < 8.0.3

  < 7.20.0**

• Patched version(s): **8.0.3

  7.20.0**

References

• GHSA-f456-rf33-4626
• CVE-2026-24132
• CWE-77
• CWE-94
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6