GHSA-P2MM-64F6-GMPP fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

Summary fastapi-code-generator koxudaxi emits the OpenAPI path into the generated main.py route decorator as a single-quoted string literal @app.get'/u//x' without escaping the '. A ' in the path closes the decorator string and, via concatenation, injects a live expression that the decorator...