`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description

Summarydatamodel-code-generator is vulnerable to code injection when generating Python models from an attacker-controlled GraphQL schema. A description on a Union type, written in the regular-string form "..." with a literal \r escape, is rendered into a Python comment by a Jinja2 filter that...

PT-2026-65665

Summary datamodel-code-generator's built-in HTTP fetcher http.get body issues an httpx.GET against any URL passed to --url or reached via a redirect chain with no allow-list, no deny-list, no IP/host validation, and follow redirects=True. Loopback addresses, RFC1918 ranges, link-local...