CVE-2026-108385

The dataclasses-avroschema library (versions 0.38.0 through 0.70.5 ) is vulnerable to code injection due to improper validation of enum symbols. The BaseGenerator.parse_enum and EnumRepresentation.render_symbols functions use schema-controlled symbols as generated enum member names without verify...