CVE-2026-63720-datamodel-code-generator

CVE-2026-63720: datamodel-code-generator における検証されていない customBasePath によるコードインジェクション 重大度: 高, CVSS 3.1 7.5 / CVSS 4.0 7.5 （VulnCheck（CNA）により割り当て） 環境上限（ネットワークサービス展開）: 最大 9.8 ベクター（v4.0）: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N ベクター（v3.1）:...

CVE-2026-63720

CVE-2026-63720 affects datamodel-code-generator prior to version 0.70.0. The issue is a code injection vulnerability where attackers who control input schemas can supply a malicious customBasePath containing embedded newlines and a dot-free Python expression, which is emitted into a generated fro...

CVE-2026-63720 datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...

CVE-2026-63720: Improper Control of Generation of Code

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value ...