{"vulnerability": "CVE-2026-55390", "sightings": [{"uuid": "a8914a43-9829-46cd-8a4c-67f5257176a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55390", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g", "content": "", "creation_timestamp": "2026-07-28T22:35:32.178041Z"}, {"uuid": "da44d174-7b47-45dc-8ba7-0e780b1bafde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q", "content": "\ud83d\udfe0 CVE-2026-55390 - High (7.5)\n\ndatamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55390/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T23:01:03.976616Z"}, {"uuid": "bf98a099-6c6f-46a1-8b4a-fba84777a9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlj43wks2q", "content": "CVE-2026-55390 - Arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate\nCVE ID : CVE-2026-55390\n \n Published : July 28, 2026, 10:17 p.m. | 22\u00a0minutes ago\n \n Description : datamodel-code-generator generates Python d...", "creation_timestamp": "2026-07-28T23:40:45.962561Z"}, {"uuid": "1b11747b-d694-4d78-8d67-51d917b4376d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrqmtex4p224", "content": "A Python Model Bug Ships First; Czech Awareness Arrives After Lunch\nPANIC 52% | Lag 0.0h | datamodel-code-generator versions from 0.59.0 onward are affected by CVE-2026-55390, a high-severity\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-29T00:04:24.536581Z"}, {"uuid": "625d0675-93ff-4506-944c-d65c44b8d6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrsfpsthfv27", "content": "CVE-2026-55390 - High severity path traversal in datamodel-code-generator 0.59.0-0.62.0. Arbitrary local file read via XML schema imports. CVSS 7.5. Update to 0.62.0 immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55390/", "creation_timestamp": "2026-07-29T17:02:28.295338Z"}]}