CVE-2026-63471

The fastapi-code-generator tool (prior to version 0.8.1 ) is vulnerable to Remote Code Execution (RCE) during the import time of a generated module. The root cause is the failure to escape embedded quotes when inserting an OpenAPI path into a generated @app.get(...) route decorator. An attacker w...