1 matches found
`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
SummaryWhen the Pydantic v2 output mode is in use, datamodel-code-generator reads a validators array from each model entry in the --extra-template-data file and synthesises a Pydantic @fieldvalidator... decorator from each entry. The field names and the validator mode are interpolated into the...
7.8CVSS6.3AI score0.00252EPSS
SaveExploits1References7Affected Software1
20