CVE-2024-55978

CVE-2024-55978 Code Generator Pro = 1.2 - Unauthenticated SQL Injection Description The Code Generator Pro plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVE-2026-127208

datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary code execution by supplying a malicious JSON Schema with a crafted x-python-type annotation containing a string ast.Constant node in a subscript slice position, which bypasses...

CVE-2026-127208 datamodel-code-generator < 0.84.0 Code Injection via x-python-type Annotation

datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary code execution by supplying a malicious JSON Schema with a crafted x-python-type annotation containing a string ast.Constant node in a subscript slice position, which bypasses...

EUVD-2026-124714

datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary code execution by supplying a malicious JSON Schema with a crafted x-python-type annotation containing a string ast.Constant node in a subscript slice position, which bypasses...

CVE-2026-127208

The datamodel-code-generator library (versions before 0.84.0 ) is vulnerable to a code injection vulnerability. The root cause is a validation bypass in parse_python_type_annotation and _python_type_expr_from_ast, which allows an attacker to provide a malicious JSON Schema with a crafted x-python...

WordPress-Flex-QR-Code-Generator---CVE-2025-10041

CVE-2025-10041: Arbitrary File Upload Vulnerability Analysis in the Flex QR Code Generator Plugin 1. Vulnerability Overview Plugin Name : Flex QR Code Generator Affected Versions : ≤ 1.2.5 all versions Vulnerability Type : Arbitrary File Upload → Remote Code Execution RCE Exploitation Conditions ...

obridge

OBridge OBridge provides a simple Java source code generator for calling Oracle PL/SQL package procedures. Supported input, output parameters and return values are: BINARYINTEGER BOOLEAN CHAR CLOB BLOB DATE NCHAR NUMBER NVARCHAR2 OBJECT - Oracle Object Type PLSINTEGER TABLE - Table of Oracle Obje...

CVE-2026-127208: datamodel-code-generator: datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve…

datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary code execution by supplying a malicious JSON Schema with a crafted x-python-type annotation containing a string ast.Constant node in a subscript slice position, which bypasses...

PT-2026-146058

datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary code execution by supplying a malicious JSON Schema with a crafted x-python-type annotation containing a string ast.Constant node in a subscript slice position, which bypasses...

CVE-2026-63720-datamodel-code-generator

CVE-2026-63720: Code Injection in datamodel-code-generator via Unvalidated customBasePath Severity: High, CVSS 3.1 7.5 / CVSS 4.0 7.5 assigned by VulnCheck, the CNA Environmental ceiling network-service deployment: up to 9.8 Vector v4.0:...

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 This post is about CVE-2022–24992 my first CVE, which refers to a vulnerability in QRCDR's widely used QR-Code generator script. more info Best, n0lsec...

GHSA-P2MM-64F6-GMPP fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

Summary fastapi-code-generator koxudaxi emits the OpenAPI path into the generated main.py route decorator as a single-quoted string literal @app.get'/u//x' without escaping the '. A ' in the path closes the decorator string and, via concatenation, injects a live expression that the decorator...

fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

Summary fastapi-code-generator koxudaxi emits the OpenAPI path into the generated main.py route decorator as a single-quoted string literal @app.get'/u//x' without escaping the '. A ' in the path closes the decorator string and, via concatenation, injects a live expression that the decorator...

EUVD-2026-116147

fastapi-code-generator: Import-time RCE via route path - unescaped @app.get'...' decorator...

GHSA-6XMV-CJR5-W3Q8 fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict

Summary fastapi-code-generator koxudaxi emits an operation's extra responses into the route decorator's responses=... dict, using each response's status-code key as a single-quoted string literal without escaping the '. A ' in a status-code key closes the dict-key string and, via concatenation,...

EUVD-2026-116146

fastapi-code-generator: Import-time RCE via response status-code key - unescaped @app.get..., responses=... dict...

fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict

Summary fastapi-code-generator koxudaxi emits an operation's extra responses into the route decorator's responses=... dict, using each response's status-code key as a single-quoted string literal without escaping the '. A ' in a status-code key closes the dict-key string and, via concatenation,...

GHSA-H667-4JJ2-CGV4 fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring

Summary fastapi-code-generator koxudaxi emits an operation's summary as the generated route handler's docstring, using a triple-quoted string without escaping """. A """ in the summary closes the docstring and, via concatenation, injects a live expression that becomes an expression statement in t...

EUVD-2026-116145

fastapi-code-generator: Call-time RCE via operation summary - unescaped route-handler docstring...

fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring

Summary fastapi-code-generator koxudaxi emits an operation's summary as the generated route handler's docstring, using a triple-quoted string without escaping """. A """ in the summary closes the docstring and, via concatenation, injects a live expression that becomes an expression statement in t...