CVE-2026-108377

The dataclasses-avroschema library (versions 0.62.3 through 0.70.5 ) is vulnerable to code injection due to improper handling of schema-controlled record names. Specifically, the ClassRepresentation.render_metaclass function inserts these names into the Meta.schema_name field of generated Python ...