Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 until 0.60.2, x-python-type values parsed by src/datamodel_code_generator/parser/jsonschema.py in _get_python_type_override are inserted into generated field annotations without sufficient validation, allowing attacker-controlled JSON Schema content to execute Python code when the generated module is imported. This issue is fixed in version 0.60.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-23 | 1 | General1 |
| 2026-07-29 | 2 | Disclosure2 |
CVE-2026-54621 CVE-2026-54653 CVE-2026-54654 CVE-2026-54655 CVE-2026-54656 CVE-2026-54690 CVE-2026-54691 CVE-2026-55415 CVE-2026-55389 CVE-2026-55390 CVE-2026-55391 CVE-2026-55403
Post summary
The passage lists a series of CVE identifiers without providing any additional context, evidence of exploitation, or mitigation details.
🚨*CVE* CVE-2026-54655 datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 until 0.60.2, x-python-type values parsed by src/datamodel_code_generator/p… https://www.cve.org/CVERecord?id=CVE-2026-54655 ----- Traducción: CVE-2026-54655 dat… http://infoflow.cloud`
Post summary
The post announces CVE-2026-54655, describing an issue in datamodel-code-generator for versions 0.51.0 through 0.60.2 involving parsing of x-python-type values.
CVE-2026-54655 datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 until 0.60.2, x-python-type values parsed by src/datamodel_code_generator/p… https://www.cve.org/CVERecord?id=CVE-2026-54655
Post summary
The post announces a vulnerability in datamodel-code-generator affecting versions 0.51.0 to 0.60.2, detailing a parsing issue with x-python-type values, but does not provide a PoC, exploit, or patch information.