---
changelog:
  category: Release
  version: 1.13.9
date: '2026-03-20T00:14:56Z'
seo:
  description: >-
    openapi: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify
    (https://github.com/middleapi/orpc/security/advisories/GHSA-7f6v-3gx7-27q8)
title: v1.13.9
type: changelog
---
###    🐞 Bug Fixes

- **openapi**: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify (https://github.com/middleapi/orpc/security/advisories/GHSA-7f6v-3gx7-27q8)

#####     [View changes on GitHub](https://github.com/middleapi/orpc/compare/v1.13.8...v1.13.9)