Orpc

1 CVEs product

Monthly

CVE-2026-28794 Mar 06, 05:16 npm CRITICAL POC PATCH Act Now

Prototype pollution in oRPC before 1.13.6. PoC and patch available.

Authentication Bypass RCE Denial Of Service Deserialization Node.js +1

NVD GitHub

CVSS 3.1

9.8

EPSS

0.8%

CVE-2026-28794 npm

EPSS 1% CVSS 9.8

CRITICAL POC PATCH Act Now

Prototype pollution in oRPC before 1.13.6. PoC and patch available.

Authentication Bypass RCE Denial Of Service +3

NVD GitHub