SUSE CVE-2026-107377

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAKIMPORTPATTERN and consumed by writemissingweakimports in...

CVE-2026-107377

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAKIMPORTPATTERN and consumed by writemissingweakimports in...

CVE-2026-107377

The datamodel-code-generator library (versions 0.59.0 through 0.81.0 ) is vulnerable to a path traversal attack when processing attacker-controlled Protobuf schemas. The root cause lies in the _write_missing_weak_imports function in src/datamodel_code_generator/parser/protobuf.py, which fails to ...