CVE-2026-108378

The dataclasses-avroschema library (versions 0.40.0 through 0.70.5 ) is vulnerable to code injection via the ClassRepresentation.render_docstring function. The root cause is the failure to escape quotes, backslashes, or unsafe control characters when copying a schema record's doc value into a gen...