CVE-2026-63720-datamodel-code-generator

CVE-2026-63720 : Injection de code dans datamodel-code-generator via un customBasePath non validé Sévérité : Élevée, CVSS 3.1 7.5 / CVSS 4.0 7.5 attribué par VulnCheck, l'organisme CNA Plafond environnemental déploiement en service réseau : jusqu'à 9.8 Vecteur v4.0 :...

CVE-2026-63720 datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...

CVE-2026-63720

CVE-2026-63720 affects datamodel-code-generator prior to version 0.70.0. The issue is a code injection vulnerability where attackers who control input schemas can supply a malicious customBasePath containing embedded newlines and a dot-free Python expression, which is emitted into a generated fro...