CVE-2026-55389

The CVE affects datamodel-code-generator (pre-0.62.0), where JSON Schema $ref resolution in src/datamodel_code_generator/parser/jsonschema.py using is_url/_get_ref_body could read arbitrary local files (via file:// or ../ traversal) when --no-allow-remote-refs is not honored. This could expose se...