5 matches found
CVE-2026-108385 dataclasses-avroschema enum symbols can inject statements through generated member names
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parseenum and EnumRepresentation.rendersymbols use each schema-controlled enum symbol as a...
8.8CVSS6AI score
SaveExploits0References5
20