Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodel_code_generator/http.py http.get_body accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private, link-local, metadata, and other network-accessible resources. This issue is fixed in version 0.61.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-23 | 1 | General1 |
| 2026-07-29 | 2 | Disclosure1General1 |
CVE-2026-54621 CVE-2026-54653 CVE-2026-54654 CVE-2026-54655 CVE-2026-54656 CVE-2026-54690 CVE-2026-54691 CVE-2026-55415 CVE-2026-55389 CVE-2026-55390 CVE-2026-55391 CVE-2026-55403
Post summary
The content merely lists a series of CVE identifiers without providing additional context, code, or details about the vulnerabilities.
🚨*CVE* CVE-2026-54691 datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodel_code_generator/http.py http.get_body accepts --u… https://www.cve.org/CVERecord?id=CVE-2026-54691 ----- Traducción: CVE-2026-54691 dat… http://infoflow.cloud`
Post summary
The text briefly announces CVE‑2026‑54691 and references affected versions of datamodel‑code‑generator, linking to the CVE record. No additional technical, exploit, or mitigation information is provided.
CVE-2026-54691 datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodel_code_generator/http.py http.get_body accepts --u… https://www.cve.org/CVERecord?id=CVE-2026-54691
Post summary
The post cites a CVE in datamodel‑code‑generator, indicating an affected function, but offers no PoC, exploit, or patch details.