Priority HIGH 81
fastapi-code-generator creates FastAPI applications from OpenAPI files.
koxudaxi
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9
Exploited now
koxudaxi records in CISA KEVNo koxudaxi vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records
Priority HIGH 81
fastapi-code-generator creates FastAPI applications from OpenAPI files.
TI-2026-39961 CVE-2026-55390 · GHSA-442q-2j6p-642g
Arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate
Priority HIGH 72
datamodel-code-generator generates Python data models from schema definitions.
TI-2026-39960 CVE-2026-55389 · GHSA-8359-h9fx-j6v9
Information disclosure in koxudaxi datamodel-code-generator
Priority HIGH 72
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV.
TI-2026-39512 CVE-2026-54691 · GHSA-rfr2-mq9m-x2qx
datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects
Priority HIGH 69
datamodel-code-generator generates Python data models from schema definitions.
TI-2026-39511 CVE-2026-54690 · GHSA-954p-556p-r752
datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)
Priority HIGH 69
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV.
TI-2026-39483 CVE-2026-54656 · GHSA-8m8r-38jm-f355
Code injection in koxudaxi datamodel-code-generator
Priority HIGH 69
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV.
TI-2026-39482 CVE-2026-54655 · GHSA-m34r-v34r-rf9q
Code injection in koxudaxi datamodel-code-generator
Priority HIGH 69
datamodel-code-generator generates Python data models from schema definitions.
TI-2026-39481 CVE-2026-54654 · GHSA-wjv6-jcfj-mf9r
Code injection in koxudaxi datamodel-code-generator
Priority HIGH 69
datamodel-code-generator generates Python data models from schema definitions.
TI-2026-39984 CVE-2026-55415 · GHSA-5578-w22f-pfx9
Code injection in koxudaxi datamodel-code-generator
Priority HIGH 68
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV.
TI-2026-39962 CVE-2026-55391 · GHSA-vx7x-vcc2-c44g
datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding
Priority HIGH 66
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV.
TI-2026-39973 CVE-2026-55403 · GHSA-r5vv-ff45-prp2
Information disclosure in koxudaxi datamodel-code-generator
Priority MEDIUM 51
datamodel-code-generator generates Python data models from schema definitions.
TI-2026-39480 CVE-2026-54653 · GHSA-386q-5hp3-95m9
`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field
Priority MEDIUM 41
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV.
Priority MEDIUM 40
fastapi-code-generator creates FastAPI applications from OpenAPI files.
TI-2026-45311 CVE-2026-63720 · GHSA-7x49-hhjc-29rg
datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field
Priority LOW 36
datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value cont…
TI-2026-39452 CVE-2026-54621 · GHSA-j884-q54q-mmx3
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description
Priority LOW 35
datamodel-code-generator generates Python data models from schema definitions.