CoGate: Confidence-Gated Co-Decoding for Secure Code Generation

Large language models are widely used for code generation, but they can also produce insecure programs due to patterns learned from their pretraining data. Decoding-time steering has become an important solution to this problem: a small expert model is combined with the target model at each step ...

PT-2026-66564

Name of the Vulnerable Software and Affected Versions Amazon @aws-amplify/codegen-ui-react versions prior to 2.20.6 Description Improper control of code generation allows a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.54) +23 more potentially affected by CVE-2026-54666 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54666 Source advisory: OSV:GHSA-W284-33MX-6G9V...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.54) +23 more potentially affected by CVE-2026-54660 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54660 Source advisory: OSV:GHSA-H754-FXP7-88WX...

GHSA-954P-556P-R752 datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)

Summary JSON-Schema $ref values pointing at HTTP or HTTPS URLs are silently dereferenced by datamodel-code-generator with no IP/host validation, no scheme allow-list, and redirects followed unconditionally. The --allow-remote-refs gate added in 0.56.0 defaults to None, which only emits a...

PT-2026-65651

Summary JSON-Schema $ref values pointing at HTTP or HTTPS URLs are silently dereferenced by datamodel-code-generator with no IP/host validation, no scheme allow-list, and redirects followed unconditionally. The --allow-remote-refs gate added in 0.56.0 defaults to None, which only emits a...

EUVD-2026-49567

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value...

BIT-DOTNET-2026-50650 .NET Framework Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...

ROS-20260727-73-0012

A vulnerability in the message broker administration console of the Apache ActiveMQ software platform is related to flaws in the code generation control mechanism. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-65014

Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...

PT-2026-65030

Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...

PT-2026-65104

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value...

The Illusion of Secure LLM Code: Closing the Security Gap Via Iterative Reprompting

Large Language Models LLMs are increasingly integrated into software development workflows, yet their ability to autonomously generate secure authentication code remains uncertain. This paper evaluates the security architecture of authentication systems generated by five prominent AI coding...

Poster: Rethinking Security in LLM Code Generation through Real-World Risk Scenarios

Large Language Models LLMs are widely used for code generation, yet their security behavior in realistic development workflows remains underexplored. Existing benchmarks often rely on explicitly specified security requirements, failing to capture real-world scenarios where prompts are frequently...

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator

Impact The Kiota PHP code generator is vulnerable to a code generation literal injection attack. The generator embeds string values from OpenAPI fields e.g. description, default values, and property names directly into PHP double-quoted string literals without properly escaping the $ character...

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator

Code Generation Literal Injection in Kiota Python Generator Leads to Arbitrary Code Execution at Import Time. The Kiota Python code generator is vulnerable to a code generation literal injection issue when processing malicious or untrusted OpenAPI specifications. Specifically, attacker-controlled...

EUVD-2026-44931

Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection...

ROS-20260722-73-0022

The vulnerability of the user interface of Google Chrome and Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

CVE-2026-15957

Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. Uncontrolled recursion in the JSON, CBOR, and XML deserializer functions emitted by Amazon smithy-...

dotnet: .NET Framework: Privilege escalation via code injection

A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected syste...