
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@orval/query
Advanced tools
[](https://badge.fury.io/js/orval) [](https://opensource.org/licenses/MIT) [ from any valid OpenAPI v3 or Swagger v2 specification, either in yaml
or json
formats.
Generate
, valid
, cache
and mock
in your React, Vue, Svelte and Angular applications all with your OpenAPI specification.
You can find below some samples
FAQs
[](https://badge.fury.io/js/orval) [](https://opensource.org/licenses/MIT) [.
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.