datamodel-code-generator
PyPI12 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting datamodel-code-generatorpage 1 of 1
- CVE-2026-54621HIGHCVSS 7.8EG 7.8✓ Fixed in 0.60.12026-07-28
vulnerable: 0.25.0 ... 0.60.0 (70 versions)
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodel_code_generator/model/template/UnionTypeStatement.jinja2 and src/datamodel_code_generator/mode…
- CVE-2026-54653HIGHCVSS 8.8EG 8.8✓ Fixed in 0.60.22026-07-28
vulnerable: 0.17.0 ... 0.60.1 (90 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.17.0 until 0.60.2, datamodel-code-generator preserves…
- CVE-2026-54654HIGHCVSS 7.8EG 7.8✓ Fixed in 0.60.22026-07-28
vulnerable: 0.14.1 ... 0.60.1 (94 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.14.1 until 0.60.2, the --extra-template-data comment field is rendered into Python comments in src/datamodel_code_generator/model/template/TypeAliasAnnot…
- CVE-2026-54655HIGHCVSS 7.8EG 7.8✓ Fixed in 0.60.22026-07-28
vulnerable: 0.51.0 ... 0.60.1 (16 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 until 0.60.2, x-python-type values parsed by src/datamodel_code_generator/parser/jsonschema.py in _get_python_type_override are inserted into genera…
- CVE-2026-54656HIGHCVSS 7.8EG 7.8✓ Fixed in 0.60.22026-07-28
vulnerable: 0.52.1 ... 0.60.1 (14 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.52.1 until 0.60.2, datamodel-code-generator interpolat…
- CVE-2026-54690HIGHCVSS 8.2EG 8.2✓ Fixed in 0.61.02026-07-28
vulnerable: 0.10.0 ... 0.9.4 (135 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.9.1 until 0.61.0, datamodel-code-generator silently de…
- CVE-2026-54691HIGHCVSS 8.2EG 8.2✓ Fixed in 0.61.02026-07-28
vulnerable: 0.10.0 ... 0.9.4 (135 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodel_code_generator/http.py http.get_body accepts --url targets and redirect chain targets without host/IP validation, allowin…
- CVE-2026-55389HIGHCVSS 7.5EG 7.5✓ Fixed in 0.62.02026-07-28
vulnerable: 0.0.1 ... 0.9.4 (252 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.62.0, datamodel-code-generator resolves JSON Schem…
- CVE-2026-55390HIGHCVSS 7.5EG 7.5✓ Fixed in 0.62.02026-07-28
vulnerable: 0.59.0 ... 0.61.0 (6 versions)
datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.62.0, XML Schema parsing in src/datamodel_code_generator/parser/xmlschema.py for --input-file-type xmlschema resolves xs:include, xs:import,…
- CVE-2026-55391HIGHCVSS 7.5EG 7.5✓ Fixed in 0.63.02026-07-28
vulnerable: 0.0.1 ... 0.9.4 (253 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL hos…
- CVE-2026-55403LOWCVSS 3.7EG 3.7✓ Fixed in 0.63.02026-07-28
vulnerable: 0.0.1 ... 0.9.4 (253 versions)
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirec…
- CVE-2026-55415HIGHCVSS 7.5EG 7.5✓ Fixed in 0.64.02026-07-28
vulnerable: 0.11.10 ... 0.63.0 (124 versions)
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows att…
Check whether datamodel-code-generator is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for datamodel-code-generator CVEs against the assets you own.
Start Free Scan →