Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodel_code_generator/model/template/UnionTypeStatement.jinja2 and src/datamodel_code_generator/model/template/UnionTypeStatement.py312.jinja2 are rendered into Python comments without neutralizing carriage returns in Python # comments, allowing attacker-controlled GraphQL schema content to inject Python code into generated models that runs when imported. This issue is fixed in version 0.60.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-23 | 1 | General1 |
| 2026-07-29 | 2 | Disclosure2 |
CVE-2026-54621 CVE-2026-54653 CVE-2026-54654 CVE-2026-54655 CVE-2026-54656 CVE-2026-54690 CVE-2026-54691 CVE-2026-55415 CVE-2026-55389 CVE-2026-55390 CVE-2026-55391 CVE-2026-55403
Post summary
The text only lists CVE identifiers without providing any additional context or specifics.
🚨*CVE* CVE-2026-54621 datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodel_code_generator/model… https://www.cve.org/CVERecord?id=CVE-2026-54621 ----- Traducción: CVE-2026-54621 dat… http://infoflow.cloud`
Post summary
A brief announcement of CVE-2026-54621 affecting datamodel-code-generator, indicating the affected component but providing no exploit or patch details.
CVE-2026-54621 datamodel-code-generator generates Python data models from schema definitions. Prior to 0.60.1, GraphQL Union description values in src/datamodel_code_generator/model… https://www.cve.org/CVERecord?id=CVE-2026-54621
Post summary
The post identifies CVE-2026-54621 affecting datamodel‑code‑generator, highlighting a bug with GraphQL Union description values prior to version 0.60.1 and implying users should upgrade to resolve the issue.