datamodel-code-generator
PyPI13 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting datamodel-code-generatorpage 1 of 1
- CVE-2026-107377HIGHCVSS 7.5EG 7.5fixed in 0.81.02026-10-08
vulnerable: 0.59.0 ... 0.80.0 (38 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAK_IMPORT_PATTERN and consumed by _…
- CVE-2026-54621HIGHCVSS 7.8EG 7.8fixed in 0.60.12026-07-28
vulnerable: 0.25.0 ... 0.60.0 (70 versions)
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodel_code_generator/model/template/UnionTypeStatement.jinja2 and src/datamodel_code_generator/mode…
- CVE-2026-54653HIGHCVSS 8.8EG 8.8fixed in 0.60.22026-07-28
vulnerable: 0.17.0 ... 0.60.1 (90 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.17.0 until 0.60.2, datamodel-code-generator preserves…
- CVE-2026-54654HIGHCVSS 7.8EG 7.8fixed in 0.60.22026-07-28
vulnerable: 0.14.1 ... 0.60.1 (94 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.14.1 until 0.60.2, the --extra-template-data comment field is rendered into Python comments in src/datamodel_code_generator/model/template/TypeAliasAnnot…
- CVE-2026-54655HIGHCVSS 7.8EG 7.8fixed in 0.60.22026-07-28
vulnerable: 0.51.0 ... 0.60.1 (16 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 until 0.60.2, x-python-type values parsed by src/datamodel_code_generator/parser/jsonschema.py in _get_python_type_override are inserted into genera…
- CVE-2026-54656HIGHCVSS 7.8EG 7.8fixed in 0.60.22026-07-28
vulnerable: 0.52.1 ... 0.60.1 (14 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.52.1 until 0.60.2, datamodel-code-generator interpolat…
- CVE-2026-54690HIGHCVSS 8.2EG 8.2fixed in 0.61.02026-07-28
vulnerable: 0.10.0 ... 0.9.4 (135 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.9.1 until 0.61.0, datamodel-code-generator silently de…
- CVE-2026-54691HIGHCVSS 8.2EG 8.2fixed in 0.61.02026-07-28
vulnerable: 0.10.0 ... 0.9.4 (135 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodel_code_generator/http.py http.get_body accepts --url targets and redirect chain targets without host/IP validation, allowin…
- CVE-2026-55389HIGHCVSS 7.5EG 7.5fixed in 0.62.02026-07-28
vulnerable: 0.0.1 ... 0.9.4 (252 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.62.0, datamodel-code-generator resolves JSON Schem…
- CVE-2026-55390HIGHCVSS 7.5EG 7.5fixed in 0.62.02026-07-28
vulnerable: 0.59.0 ... 0.61.0 (6 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.62.0, XML Schema parsing in src/datamodel_code_generator/parser/xmlschema.py for --input-file-type xmlschema resolves xs:include, xs:import,…
- CVE-2026-55391HIGHCVSS 7.5EG 7.5fixed in 0.63.02026-07-28
vulnerable: 0.0.1 ... 0.9.4 (253 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL hos…
- CVE-2026-55403LOWCVSS 3.7EG 3.7fixed in 0.63.02026-07-28
vulnerable: 0.0.1 ... 0.9.4 (253 versions)
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirec…
- CVE-2026-55415HIGHCVSS 7.5EG 7.5fixed in 0.64.02026-07-28
vulnerable: 0.11.10 ... 0.63.0 (124 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows att…
Check whether datamodel-code-generator is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for datamodel-code-generator CVEs against the assets you own.
Book a Demo →