Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

datamodel-code-generator

pypi

Datamodel Code Generator

View on github.com · View on pypi.org

Security Advisories for datamodel-code-generator in pypi

High
1 day ago

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field GSA_kwCzR0hTQS13anY2LWpjZmotbWY5cs4ABgpA

pypi datamodel-code-generator
High
1 day ago

datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs` GSA_kwCzR0hTQS04MzU5LWg5ZngtajZ2Oc4ABgo_

pypi datamodel-code-generator
High
1 day ago

`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field GSA_kwCzR0hTQS0zODZxLTVocDMtOTVtOc4ABgo-

pypi datamodel-code-generator
High
1 day ago

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding GSA_kwCzR0hTQS12eDd4LXZjYzItYzQ0Z84ABgo9

pypi datamodel-code-generator
High
1 day ago

`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data GSA_kwCzR0hTQS04bThyLTM4am0tZjM1Nc4ABgo8

pypi datamodel-code-generator
High
1 day ago

datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default) GSA_kwCzR0hTQS05NTRwLTU1NnAtcjc1Ms4ABgo7

pypi datamodel-code-generator
High
1 day ago

datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements GSA_kwCzR0hTQS01NTc4LXcyMmYtcGZ4Oc4ABgo6

pypi datamodel-code-generator
High
1 day ago

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description GSA_kwCzR0hTQS1qODg0LXE1NHEtbW14M84ABgo5

pypi datamodel-code-generator
High
1 day ago

`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator GSA_kwCzR0hTQS1tMzRyLXYzNHItcmY5cc4ABgo4

pypi datamodel-code-generator
Low
1 day ago

datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas GSA_kwCzR0hTQS1yNXZ2LWZmNDUtcHJwMs4ABgo3

pypi datamodel-code-generator
High
1 day ago

datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects GSA_kwCzR0hTQS1yZnIyLW1xOW0teDJxeM4ABgn-

pypi datamodel-code-generator
High
1 day ago

datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate GSA_kwCzR0hTQS00NDJxLTJqNnAtNjQyZ84ABgn9

pypi datamodel-code-generator

Filter by Severity

High 11 Low 1