Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/08 5:58 p.m.•21 views

datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

Summary When processing an attacker-controlled Protobuf schema, vulnerable versions of datamodel-code-generator could write a generated weak-import stub outside the intended weakimports temporary directory. Absolute import paths and relative paths containing .. could escape this directory. An...

7.5CVSS6.3AI score0.00535EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder