18 matches found
CVE-2026-63469
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an additional response status-code key into the generated responses=... route-decorator dictionary as a single-quoted Python string without escaping embedded quotes. A multi-response...
CVE-2026-63471
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an OpenAPI path into a generated @app.get... route decorator as a single-quoted generated route string without escaping embedded quotes. An attacker-controlled or attacker-influenced...
CVE-2026-63470
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts Operation.summary into a generated route-handler docstring as a triple-double-quoted string without escaping embedded triple quotes. An attacker-controlled or attacker-influenced operatio...
EUVD-2026-116147
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an OpenAPI path into a generated @app.get... route decorator as a single-quoted generated route string without escaping embedded quotes. An attacker-controlled or attacker-influenced...
CVE-2026-63471
The fastapi-code-generator tool (prior to version 0.8.1 ) is vulnerable to Remote Code Execution (RCE) during the import time of a generated module. The root cause is the failure to escape embedded quotes when inserting an OpenAPI path into a generated @app.get(...) route decorator. An attacker w...
CVE-2026-63469 fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an additional response status-code key into the generated responses=... route-decorator dictionary as a single-quoted Python string without escaping embedded quotes. A multi-response...
CVE-2026-63469
The fastapi-code-generator tool (prior to version 0.8.1 ) is vulnerable to Remote Code Execution (RCE) during the application generation process. The root cause is a code injection vulnerability where the generator inserts a response status-code key into a generated responses={...} route-decorato...
CVE-2026-63470
The fastapi-code-generator tool (prior to version 0.8.1 ) is vulnerable to Remote Code Execution (RCE) during the application generation process. The root cause is the failure to escape triple quotes within the Operation.summary field when generating a route-handler docstring. An attacker-control...
CVE-2026-63470 fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts Operation.summary into a generated route-handler docstring as a triple-double-quoted string without escaping embedded triple quotes. An attacker-controlled or attacker-influenced operatio...
EUVD-2026-116145
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts Operation.summary into a generated route-handler docstring as a triple-double-quoted string without escaping embedded triple quotes. An attacker-controlled or attacker-influenced operatio...
CVE-2026-63469: koxudaxi fastapi-code-generator: fastapi-code-generator creates FastAPI applications from OpenAPI files
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an additional response status-code key into the generated responses=... route-decorator dictionary as a single-quoted Python string without escaping embedded quotes. A multi-response...
CVE-2026-63470: koxudaxi fastapi-code-generator: fastapi-code-generator creates FastAPI applications from OpenAPI files
fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts Operation.summary into a generated route-handler docstring as a triple-double-quoted string without escaping embedded triple quotes. An attacker-controlled or attacker-influenced operatio...
agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)
datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: OSV:GHSA-77XJ-X4RM-935C...
agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)
datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: MEND:CVE-2026-107377...
agency-swarm (>=1.10.0, <=1.10.1), fastapi-code-generator (0.7.0) potentially affected by CVE-2026-55390 via datamodel-code-generator (>=0.59.1, <=0.61.0)
datamodel-code-generator PYPI version =0.59.1, =1.10.0, =1.10.1 - fastapi-code-generator 0.7.0 Source cves: CVE-2026-55390 Source advisory: OSV:PYSEC-2026-3556...
agency-swarm (>=1.10.0, <=1.10.1), fastapi-code-generator (0.7.0) potentially affected by CVE-2026-55390 via datamodel-code-generator (>=0.59.1, <=0.61.0)
datamodel-code-generator PYPI version =0.59.1, =1.10.0, =1.10.1 - fastapi-code-generator 0.7.0 Source cves: CVE-2026-55390 Source advisory: GHSA-442Q-2J6P-642G...
agency-swarm (>=1.10.0, <=1.10.1), fastapi-code-generator (0.7.0) potentially affected by CVE-2026-55390 via datamodel-code-generator (>=0.59.1, <=0.61.0)
datamodel-code-generator PYPI version =0.59.1, =1.10.0, =1.10.1 - fastapi-code-generator 0.7.0 Source cves: CVE-2026-55390 Source advisory: OSV:GHSA-442Q-2J6P-642G...
agency-swarm (>=1.10.0, <=1.10.1), fastapi-code-generator (0.7.0) potentially affected by CVE-2026-55390 via datamodel-code-generator (>=0.59.1, <=0.61.0)
datamodel-code-generator PYPI version =0.59.1, =1.10.0, =1.10.1 - fastapi-code-generator 0.7.0 Source cves: CVE-2026-55390 Source advisory: MEND:CVE-2026-55390...