Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows attacker-controlled x-python-import or customTypePath schema extensions to reach src/datamodel_code_generator/parser/jsonschema.py and generated import handling through Import.from_full_path and Imports.create_line in src/datamodel_code_generator/imports.py, allowing a newline to break out of an import statement and execute Python code when the generated model is imported. This issue is fixed in version 0.64.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-23 | 1 | General1 |
| 2026-07-29 | 2 | General2 |
| 2026-08-01 | 1 | Patch1 |
CVE-2026-54621 CVE-2026-54653 CVE-2026-54654 CVE-2026-54655 CVE-2026-54656 CVE-2026-54690 CVE-2026-54691 CVE-2026-55415 CVE-2026-55389 CVE-2026-55390 CVE-2026-55391 CVE-2026-55403
Post summary
The text merely lists several CVE identifiers without providing any additional context or details.
🚨 HIGH severity CVE-2026-55415 (CVSS 7.5) datamodel-code-generator v0.11.6-0.63.x allows code injection via malicious schema extensions. Attackers can execute arbitrary Python code when generated models are imported. ✅ Update to v0.64.0 immediately https://t.co/bFjAfokUPh
Post summary
The tweet announces a high‑severity CVE with technical details on code injection and recommends updating to v0.64.0 to mitigate the vulnerability.
🚨*CVE* CVE-2026-55415 datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YA… https://www.cve.org/CVERecord?id=CVE-2026-55415 ----- Traducción: CVE-2026-55415 dat… http://infoflow.cloud`
Post summary
The tweet only references CVE‑2026‑55415 and a generic description of a code generator, providing no actionable details on the vulnerability, exploitation, or mitigation.
CVE-2026-55415 datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YA… https://www.cve.org/CVERecord?id=CVE-2026-55415
Post summary
The post merely references CVE‑2026‑55415 and links to its CVE record, without any details about exploitation, patches, or technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | koxudaxi | datamodel-code-generator | - | - | - |