https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:36:19.126155+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-63720 CVE-2026-63720 — datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field 2026-10-06T14:36:19.180734+00:00

Affected: koxudaxi datamodel-code-generator

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value is emitted verbatim into a generated 'from ... import ...' statement without identifier validation, causing arbitrary Python code to execute when the generated module is imported.