agency-swarm (>=1.9.8, <=1.9.9), aigear (>=0.0.2, <=0.2.1) +34 more potentially affected by CVE-2026-54656 via datamodel-code-generator (>=0.52.2, <=0.59.1)

datamodel-code-generator PYPI version =0.52.2, =1.9.8, =0.0.2, =1.3.5, =0.3.1, =0.9.0, =0.7.6, =0.14.2, =0.3.2, =1.2.1, =8.1.2, =0.6.0, =2.5.1, =3.0.4 and more Source cves: CVE-2026-54656 Source advisory: OSV:PYSEC-2026-3559...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +124 more potentially affected by CVE-2026-54653 via datamodel-code-generator (>=0.17.1, <=0.59.1)

datamodel-code-generator PYPI version =0.17.1, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.1.0, =0.6.0 and more Source cves: CVE-2026-54653 Source advisory: OSV:PYSEC-2026-3555...

PYSEC-2026-3557 datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

Summary A malicious input schema OpenAPI / JSON Schema can execute arbitrary Python code on the machine that imports the generated model. The x-python-import and customTypePath schema extensions flow, unsanitized, into the import statements datamodel-code-generator emits. A newline embedded in th...

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field

Summarydatamodel-code-generator is vulnerable to code injection when a developer passes an --extra-template-data file whose comment value contains a literal \r carriage return. The comment variable is rendered into a Python comment in six built-in templates with no line-terminator escaping...

datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)

SummaryJSON-Schema $ref values pointing at HTTP or HTTPS URLs are silently dereferenced by datamodel-code-generator with no IP/host validation, no scheme allow-list, and redirects followed unconditionally. The --allow-remote-refs gate added in 0.56.0 defaults to None, which only emits a deprecati...

PYSEC-2026-3563 datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas

Summary When datamodel-code-generator fetches a remote schema and follows an HTTP redirect, it re-sends the original request headers, including any Authorization header, to the redirect target even when the redirect changes origin host/port/scheme. Credentials that an operator scoped to a trusted...

`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data

SummaryWhen the Pydantic v2 output mode is in use, datamodel-code-generator reads a validators array from each model entry in the --extra-template-data file and synthesises a Pydantic @fieldvalidator... decorator from each entry. The field names and the validator mode are interpolated into the...

`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator

Summarydatamodel-code-generator honours a custom x-python-type JSON-Schema extension that lets a schema author override the generated Python type for a field. The value is forwarded verbatim into the generated Python source as the field annotation, with a single sanitisation pass that is trivial ...

PYSEC-2026-3564 datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects

Summary datamodel-code-generator's built-in HTTP fetcher http.getbody issues an httpx.GET against any URL passed to --url or reached via a redirect chain with no allow-list, no deny-list, no IP/host validation, and followredirects=True. Loopback addresses, RFC1918 ranges, link-local 169.254.169.2...

PYSEC-2026-3561 `datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description

Summary datamodel-code-generator is vulnerable to code injection when generating Python models from an attacker-controlled GraphQL schema. A description on a Union type, written in the regular-string form "..." with a literal \r escape, is rendered into a Python comment by a Jinja2 filter that...

agency-swarm (>=1.10.0, <=1.10.1), fastapi-code-generator (0.7.0) potentially affected by CVE-2026-55390 via datamodel-code-generator (>=0.59.1, <=0.61.0)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =1.10.1 - fastapi-code-generator 0.7.0 Source cves: CVE-2026-55390 Source advisory: OSV:PYSEC-2026-3556...

agency-swarm (>=1.9.8, <=1.9.9), aigear (>=0.0.2, <=0.2.1) +34 more potentially affected by CVE-2026-54655 via datamodel-code-generator (>=0.51.0, <=0.59.1)

datamodel-code-generator PYPI version =0.51.0, =1.9.8, =0.0.2, =1.3.5, =0.3.1, =0.9.0, =0.7.6, =0.14.2, =0.3.2, =1.2.1, =8.1.2, =0.6.0, =2.5.1, =3.0.4 and more Source cves: CVE-2026-54655 Source advisory: OSV:PYSEC-2026-3562...

PYSEC-2026-3558 datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`

Summary datamodel-code-generator resolves JSON-Schema $ref targets that point at the local filesystem without restricting them to the input/base directory and without honoring the remote-reference security control. In the default configuration, an attacker who controls an input schema a "paste yo...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +127 more potentially affected by CVE-2026-54654 via datamodel-code-generator (>=0.14.1, <=0.59.1)

datamodel-code-generator PYPI version =0.14.1, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.1.0, =0.6.0 and more Source cves: CVE-2026-54654 Source advisory: OSV:PYSEC-2026-3566...

Exploit for CVE-2026-63720

CVE-2026-63720: Code Injection in datamodel-code-generator via...

Code Injection

datamodel-code-generator is vulnerable to Code Injection. The vulnerability is due to insufficient validation of x-python-type values from attacker-controlled JSON Schema content before inserting them into generated Python field annotations, which allows an attacker to execute arbitrary Python co...

Sensitive Information Exposure

datamodel-code-generator is vulnerable to Sensitive Information Exposure. The vulnerability is due to the reuse of Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, which allows an attacker controlling a redirect target to...

Server-Side Request Forgery (SSRF)

datamodel-code-generator is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to http.getbody in src/datamodelcodegenerator/http.py accepting --url targets and redirect chain targets without proper host/IP validation, which allows an attacker to perform server-side request...

Path Traversal

datamodel-code-generator is vulnerable to Path Traversal. The vulnerability is due to improper validation of schemaLocation values in XML Schema parsing xs:include, xs:import, xs:redefine, and xs:override, which allows an attacker to reference files outside the intended input base path, resulting...

SUSE CVE-2026-55391

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL host once in src/datamodelcodegenerator/http.py through...