CVE-2026-63720

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...

CVE-2026-63720

CVE-2026-63720 affects datamodel-code-generator prior to version 0.70.0. The issue is a code injection vulnerability where attackers who control input schemas can supply a malicious customBasePath containing embedded newlines and a dot-free Python expression, which is emitted into a generated fro...

CVE-2026-63720 datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...

CVE-2026-63720 datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...

CVE-2026-63720 datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...

PT-2026-64795

Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions prior to 0.70.0 Description A code injection flaw exists where attackers controlling input schemas can achieve remote code execution. By providing a malicious customBasePath value containing embedded newlines...

CVE-2026-63720: Improper Control of Generation of Code

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...

datamodel-code-generator (>=0.1.0, <=0.2.4), lambdantic (>=0.0.1, <=0.0.4) potentially affected by CVE-2024-3772 via pydantic (0.32.0)

pydantic PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - datamodel-code-generator =0.1.0, =0.0.1, =0.0.4 Source cves: CVE-2024-3772 Source advisory: OSV:PYSEC-2026-1812...

aas-middleware (>=0.1.0, <=0.2.6), agency-skej-framework (>=0.0.1, <=0.0.7) +91 more potentially affected by unknown CVE via datamodel-code-generator (>=0.5.10, <=0.30.2)

datamodel-code-generator PYPI version =0.5.10, =0.1.0, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.6, =0.1.4, =0.1.11 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DATAMODELCODEGENERATOR-14829603...

Arbitrary Code Injection

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper sanitization of filenames used in generated headers. An attacker can provide a maliciously crafted filename containing Python syntax or esca...

datamodel-code-generator (>=0.1.0, <=0.2.4), lambdantic (>=0.0.1, <=0.0.4) potentially affected by CVE-2024-3772 via pydantic (0.32.0)

pydantic PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - datamodel-code-generator =0.1.0, =0.0.1, =0.0.4 Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

datamodel-code-generator (>=0.1.0, <=0.2.16), fluxio-parser (0.1.0) +16 more potentially affected by CVE-2024-21503 via black (19.3.0b0)

black PYPI version 19.3.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - datamodel-code-generator =0.1.0, =0.1.13, =0.1.4, =0.0.0, =0.0.12, =0.1.4, =2019.7.20, =0.0.5, =0.0.18 - straitjacket 201904.10.0b0 and more Source...

datamodel-code-generator (>=0.1.0, <=0.2.4), lambdantic (>=0.0.1, <=0.0.4) potentially affected by CVE-2021-29510 via pydantic (0.32.0)

pydantic PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - datamodel-code-generator =0.1.0, =0.0.1, =0.0.4 Source cves: CVE-2021-29510 Source advisory: OSV:GHSA-5JQP-QGF6-3PVH...

datamodel-code-generator (>=0.1.0, <=0.2.4), lambdantic (>=0.0.1, <=0.0.4) potentially affected by CVE-2021-29510 via pydantic (0.32.0)

pydantic PYPI version 0.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydantic and may be impacted: - datamodel-code-generator =0.1.0, =0.0.1, =0.0.4 Source cves: CVE-2021-29510 Source advisory: OSV:PYSEC-2021-47...