{"api_version":"v1","generated_at":"2026-10-06T02:45:00+00:00","product":{"cve_count":5,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-middleapi-orpc-145ae492b896","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/orpc","name":"orpc","next_cursor":null,"observations":[{"affected":"orpc: < 1.14.10","affected_versions_present":true,"cve_id":"CVE-2026-103918","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103918","fixed":"1.14.10.","last_modified":"2026-10-02T20:02:50.946Z","patch_url":"https://github.com/middleapi/orpc/security/advisories/GHSA-gcgf-fh7c-8gf2","primary_source":"","published":"2026-10-02T20:02:50.946Z"},{"affected":"orpc: < 1.14.9","affected_versions_present":true,"cve_id":"CVE-2026-103036","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103036","fixed":"1.14.9.","last_modified":"2026-10-02T20:00:46.620Z","patch_url":"https://github.com/middleapi/orpc/security/advisories/GHSA-4h5r-cv8j-4456","primary_source":"","published":"2026-10-02T19:59:23.947Z"},{"affected":"orpc: < 1.14.8","affected_versions_present":true,"cve_id":"CVE-2026-77360","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-77360","fixed":"1.14.8.","last_modified":"2026-09-16T19:40:51.991Z","patch_url":"https://github.com/middleapi/orpc/security/advisories/GHSA-j9v4-rhgr-4m5f","primary_source":"","published":"2026-09-16T18:42:45.816Z"},{"affected":"< 1.13.9","affected_versions_present":true,"cve_id":"CVE-2026-33331","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33331","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-25T13:34:26.196Z","patch_url":"https://github.com/middleapi/orpc/commit/4f0efa8a1d3fa8e8317a4b03cc3945a5dfd68add","primary_source":"","published":"2026-03-24T19:18:00.164Z"},{"affected":"< 1.13.6","affected_versions_present":true,"cve_id":"CVE-2026-28794","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28794","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-09T19:53:35.764Z","patch_url":"https://github.com/middleapi/orpc/commit/1dba06fc6f938c2486de303c2fa096bc1c8418b5","primary_source":"","published":"2026-03-06T05:02:19.019Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"middleapi"}}