Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-23 | 1 | General1 |
| 2026-07-29 | 2 | Patch2 |
CVE-2026-54621 CVE-2026-54653 CVE-2026-54654 CVE-2026-54655 CVE-2026-54656 CVE-2026-54690 CVE-2026-54691 CVE-2026-55415 CVE-2026-55389 CVE-2026-55390 CVE-2026-55391 CVE-2026-55403
Post summary
Provided text contains only a list of CVE numbers with no additional context or details.
🚨*CVE* CVE-2026-55403 datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Co… https://www.cve.org/CVERecord?id=CVE-2026-55403 ----- Traducción: CVE-2026-55403 dat… http://infoflow.cloud`
Post summary
The post announces CVE-2026-55403 in datamodel‑code‑generator, describing how older versions mishandle HTTP Authorization headers, and indicates that upgrading to 0.63.0 fixes the flaw.
CVE-2026-55403 datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Co… https://www.cve.org/CVERecord?id=CVE-2026-55403
Post summary
The CVE-2026-55403 vulnerability involves the datamodel-code-generator reusing an Authorization header before version 0.63.0; a patch is available, but there is no evidence of exploitation or PoC.