CVE-2026-127208

The datamodel-code-generator library (versions before 0.84.0 ) is vulnerable to a code injection vulnerability. The root cause is a validation bypass in parse_python_type_annotation and _python_type_expr_from_ast, which allows an attacker to provide a malicious JSON Schema with a crafted x-python...