koxudaxi/datamodel-code-generator

koxudaxi/datamodel-code-generator

GitHubGitHub
GitHubgithub.com
datamodel-code-generator.koxudaxi.devdatamodel-code-generator.koxudaxi.dev
Releases268
Frequency1 week 2 days
Last Release
Stars3.98K
Generate Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON/YAML/CSV.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2026-63720NVD↗
—7.5 HIGH—

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value is emitted verbatim into a generated 'from ... import ...' statement without identifier validation, causing arbitrary Python code to execute when the generated module is imported.