`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field

Summarydatamodel-code-generator is vulnerable to code injection when a developer passes an --extra-template-data file whose comment value contains a literal \r carriage return. The comment variable is rendered into a Python comment in six built-in templates with no line-terminator escaping...

PT-2026-65670

Summary datamodel-code-generator is vulnerable to code injection when a developer passes an --extra-template-data file whose comment value contains a literal r carriage return. The comment variable is rendered into a Python comment in six built-in templates with no line-terminator escaping...

[SECURITY] Fedora 44 Update: python-pytokens-0.4.1-4.fc44

A Fast, spec compliant Python 3.14+ tokenizer that runs on older Pythons...