datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodel_code_generator/model/template/U...

CVE-2026-54621

datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union descriptio

历史摘要 · 未重新核验 · NVD

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field

CVE-2026-54654

### Summary `datamodel-code-generator` is vulnerable to code injection when a developer passes an `--extra-template-dat

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field

CVE-2026-54653

### Summary `datamodel-code-generator` is vulnerable to code injection when generating Python models from an attacker-c

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data

CVE-2026-54656

### Summary When the Pydantic v2 output mode is in use, `datamodel-code-generator` reads a `validators` array from each

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

CVE-2026-55415

#### Summary A malicious input schema (OpenAPI / JSON Schema) can execute arbitrary Python code on the machine that **i

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description

CVE-2026-54621

### Summary `datamodel-code-generator` is vulnerable to code injection when generating Python models from an attacker-c

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator

CVE-2026-54655

### Summary `datamodel-code-generator` honours a custom `x-python-type` JSON-Schema extension that lets a schema author

历史摘要 · 未重新核验 · GitHub Advisory

Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session...

CVE-2026-66745

Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability t

历史摘要 · 未重新核验 · GitHub Advisory

Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability that allows unauthenticated attackers to hijack administra...

CVE-2026-66745

Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability t

历史摘要 · 未重新核验 · NVD

Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows users with custom_fields manage permission to execute arbitra...

CVE-2026-66748

Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows user

历史摘要 · 未重新核验 · NVD

Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field

CVE-2026-66748

Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows user

历史摘要 · 未重新核验 · OSV.dev

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form processing logic allowed code execution for forms that include...

CVE-2026-65880

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form proce

历史摘要 · 未重新核验 · NVD

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to exec...

CVE-2026-56747

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a r

历史摘要 · 未重新核验 · NVD

The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request handlers, whose only protection is derived from a cryptograph...

CVE-2026-14289

The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request hand

历史摘要 · 未重新核验 · NVD

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that...

CVE-2026-63720

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who contr

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supp...

CVE-2026-63720

datamodel-code-generator 是一个根据数据模型（如 JSON Schema、OpenAPI 等）自动生成 Python 数据类代码的工具。其 0.70.0 之前版本存在代码注入漏洞（CVE-2026-63720）。攻击

历史摘要 · 未重新核验 · NVD

datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

CVE-2026-63720

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who contr

历史摘要 · 未重新核验 · OSV.dev

Oh My Posh: Arbitrary command execution via template injection in the path segment

### Summary Oh My Posh re-renders the resolved path string, which contains the raw folder names taken from the filesyste

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback

CVE-2026-62379

## Summary A pre-authentication remote code execution vulnerability affects OpenAM. The remote authentication endpoint (

历史摘要 · 未重新核验 · GitHub Advisory

Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution...

CVE-2025-71389

Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a versio

历史摘要 · 未重新核验 · GitHub Advisory