Vulnerability-Lookup

OPENSUSE-SU-2026:11538-1

Vulnerability from csaf_opensuse - Published: 2026-08-18 00:00 - Updated: 2026-09-17 17:20

Summary

python313-datamodel-code-generator-0.72.3-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: python313-datamodel-code-generator-0.72.3-1.1 on GA media

Description of the patch: These are all security issues fixed in the python313-datamodel-code-generator-0.72.3-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-11538

CVE-2026-55391

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-55403

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 8 products, the same list as for CVE-2026-55391

Threats

Impact low

CVE-2026-63720

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 8 products, the same list as for CVE-2026-55391

Threats

Impact important

References

11 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-55391/	self
https://www.suse.com/security/cve/CVE-2026-55403/	self
https://www.suse.com/security/cve/CVE-2026-63720/	self
https://www.suse.com/security/cve/CVE-2026-55391	external
https://bugzilla.suse.com/1272870	external
https://www.suse.com/security/cve/CVE-2026-55403	external
https://bugzilla.suse.com/1272885	external
https://www.suse.com/security/cve/CVE-2026-63720	external
https://bugzilla.suse.com/1272888	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "python313-datamodel-code-generator-0.72.3-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the python313-datamodel-code-generator-0.72.3-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11538",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11538-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-55391 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-55391/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-55403 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-55403/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63720 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63720/"
      }
    ],
    "title": "python313-datamodel-code-generator-0.72.3-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-17T17:20:04Z",
      "generator": {
        "date": "2026-08-18T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11538-1",
      "initial_release_date": "2026-08-18T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-08-18T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:24:10Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:26:30Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T17:20:04Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
                "product": {
                  "name": "python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
                  "product_id": "python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python313-datamodel-code-generator@0.72.3-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
                "product": {
                  "name": "python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
                  "product_id": "python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python314-datamodel-code-generator@0.72.3-1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
                "product": {
                  "name": "python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
                  "product_id": "python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python313-datamodel-code-generator@0.72.3-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
                "product": {
                  "name": "python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
                  "product_id": "python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python314-datamodel-code-generator@0.72.3-1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
                "product": {
                  "name": "python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
                  "product_id": "python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python313-datamodel-code-generator@0.72.3-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
                "product": {
                  "name": "python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
                  "product_id": "python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python314-datamodel-code-generator@0.72.3-1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
                "product": {
                  "name": "python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
                  "product_id": "python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python313-datamodel-code-generator@0.72.3-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python314-datamodel-code-generator-0:0.72.3-1.1.x86_64",
                "product": {
                  "name": "python314-datamodel-code-generator-0:0.72.3-1.1.x86_64",
                  "product_id": "python314-datamodel-code-generator-0:0.72.3-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python314-datamodel-code-generator@0.72.3-1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-datamodel-code-generator-0:0.72.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64"
        },
        "product_reference": "python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le"
        },
        "product_reference": "python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-datamodel-code-generator-0:0.72.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x"
        },
        "product_reference": "python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python313-datamodel-code-generator-0:0.72.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64"
        },
        "product_reference": "python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-datamodel-code-generator-0:0.72.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64"
        },
        "product_reference": "python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le"
        },
        "product_reference": "python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-datamodel-code-generator-0:0.72.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x"
        },
        "product_reference": "python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python314-datamodel-code-generator-0:0.72.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
        },
        "product_reference": "python314-datamodel-code-generator-0:0.72.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-55391",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-55391"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL host once in src/datamodel_code_generator/http.py through get_body, _validate_url_for_fetch, and _get_ips_from_host, but then lets httpx resolve the host again for the connection, allowing DNS rebinding to bypass allow_private_network=False and reach internal services. This issue is fixed in version 0.63.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-55391",
          "url": "https://www.suse.com/security/cve/CVE-2026-55391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272870 for CVE-2026-55391",
          "url": "https://bugzilla.suse.com/1272870"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-55391"
    },
    {
      "cve": "CVE-2026-55403",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-55403"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-55403",
          "url": "https://www.suse.com/security/cve/CVE-2026-55403"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272885 for CVE-2026-55403",
          "url": "https://bugzilla.suse.com/1272885"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-55403"
    },
    {
      "cve": "CVE-2026-63720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value is emitted verbatim into a generated \u0027from ... import ...\u0027 statement without identifier validation, causing arbitrary Python code to execute when the generated module is imported.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
          "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
          "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63720",
          "url": "https://www.suse.com/security/cve/CVE-2026-63720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272888 for CVE-2026-63720",
          "url": "https://bugzilla.suse.com/1272888"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python313-datamodel-code-generator-0:0.72.3-1.1.x86_64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.aarch64",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.ppc64le",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.s390x",
            "openSUSE Tumbleweed:python314-datamodel-code-generator-0:0.72.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-63720"
    }
  ]
}

CVE-2026-55391 (GCVE-0-2026-55391)

Vulnerability from cvelistv5 – Published: 2026-07-28 21:45 – Updated: 2026-07-29 13:30

Title

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

Summary

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL host once in src/datamodel_code_generator/http.py through get_body, _validate_url_for_fetch, and _get_ips_from_host, but then lets httpx resolve the host again for the connection, allowing DNS rebinding to bypass allow_private_network=False and reach internal services. This issue is fixed in version 0.63.0.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-29 13:29 UTC

CWE

CWE-350 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://github.com/koxudaxi/datamodel-code-genera…	x_refsource_CONFIRM
https://github.com/koxudaxi/datamodel-code-genera…	x_refsource_MISC
https://github.com/koxudaxi/datamodel-code-genera…	x_refsource_MISC
https://gist.github.com/thegr1ffyn/c1d54dd6ff2a4c…	exploit

Impacted products

1 product

Vendor	Product	Version
koxudaxi	datamodel-code-generator	Affected: < 0.63.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-55391",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-29T13:29:52.729955Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-29T13:30:14.117Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://gist.github.com/thegr1ffyn/c1d54dd6ff2a4c0d7d0dabe00c4985f4"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "datamodel-code-generator",
          "vendor": "koxudaxi",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.63.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL host once in src/datamodel_code_generator/http.py through get_body, _validate_url_for_fetch, and _get_ips_from_host, but then lets httpx resolve the host again for the connection, allowing DNS rebinding to bypass allow_private_network=False and reach internal services. This issue is fixed in version 0.63.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-350",
              "description": "CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-28T21:45:39.058Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-vx7x-vcc2-c44g",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-vx7x-vcc2-c44g"
        },
        {
          "name": "https://github.com/koxudaxi/datamodel-code-generator/commit/25c8b7e497419eb20b230fa3318c04f9bebc5a6f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/koxudaxi/datamodel-code-generator/commit/25c8b7e497419eb20b230fa3318c04f9bebc5a6f"
        },
        {
          "name": "https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.63.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.63.0"
        }
      ],
      "source": {
        "advisory": "GHSA-vx7x-vcc2-c44g",
        "discovery": "UNKNOWN"
      },
      "title": "datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-55391",
    "datePublished": "2026-07-28T21:45:39.058Z",
    "dateReserved": "2026-06-16T18:57:40.183Z",
    "dateUpdated": "2026-07-29T13:30:14.117Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-55403 (GCVE-0-2026-55403)

Vulnerability from cvelistv5 – Published: 2026-07-28 21:31 – Updated: 2026-07-29 12:46

Title

datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas

Summary

datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-29 12:45 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/koxudaxi/datamodel-code-genera…	x_refsource_CONFIRM
https://github.com/koxudaxi/datamodel-code-genera…	x_refsource_MISC
https://github.com/koxudaxi/datamodel-code-genera…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
koxudaxi	datamodel-code-generator	Affected: < 0.63.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-55403",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-29T12:45:40.786689Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-29T12:46:11.346Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-r5vv-ff45-prp2"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "datamodel-code-generator",
          "vendor": "koxudaxi",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.63.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-28T21:31:49.172Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-r5vv-ff45-prp2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-r5vv-ff45-prp2"
        },
        {
          "name": "https://github.com/koxudaxi/datamodel-code-generator/commit/a585c037c8307b7aae815de193b7fe1c4c44994b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/koxudaxi/datamodel-code-generator/commit/a585c037c8307b7aae815de193b7fe1c4c44994b"
        },
        {
          "name": "https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.63.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.63.0"
        }
      ],
      "source": {
        "advisory": "GHSA-r5vv-ff45-prp2",
        "discovery": "UNKNOWN"
      },
      "title": "datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-55403",
    "datePublished": "2026-07-28T21:31:49.172Z",
    "dateReserved": "2026-06-16T21:48:43.124Z",
    "dateUpdated": "2026-07-29T12:46:11.346Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63720 (GCVE-0-2026-63720)

Vulnerability from cvelistv5 – Published: 2026-07-26 03:51 – Updated: 2026-08-14 16:50

Title

datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

Summary

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value is emitted verbatim into a generated 'from ... import ...' statement without identifier validation, causing arbitrary Python code to execute when the generated module is imported.

Severity

7.5 (High)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-27 14:39 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

VulnCheck mitre root

References

5 references

URL	Tags
https://github.com/koxudaxi/datamodel-code-genera…	productpatch
https://github.com/koxudaxi/datamodel-code-generator	product
https://www.vulncheck.com/advisories/datamodel-co…	third-party-advisory
https://rahulkarne.com/#/cve/CVE-2026-63720	exploit
https://github.com/rahulreddykarne/CVE-2026-63720…	technical-description

Impacted products

1 product

Vendor	Product	Version
koxudaxi	datamodel-code-generator	Affected: 0 , < 0.70.0 (custom) cpe:2.3:a:koxudaxi:datamodel-code-generator::::::python::*

Date Public

2026-07-25 00:00

Credits

Rahul Karne

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63720",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-27T14:39:56.122239Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-27T14:40:06.743Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "datamodel-code-generator",
          "vendor": "koxudaxi",
          "versions": [
            {
              "lessThan": "0.70.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:koxudaxi:datamodel-code-generator:*:*:*:*:*:python:*:*",
                  "versionEndExcluding": "0.70.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Rahul Karne"
        }
      ],
      "datePublic": "2026-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines and a dot-free Python expression. The crafted value is emitted verbatim into a generated \u0027from ... import ...\u0027 statement without identifier validation, causing arbitrary Python code to execute when the generated module is imported."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-14T16:50:34.298Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Patch Commit",
          "tags": [
            "product",
            "patch"
          ],
          "url": "https://github.com/koxudaxi/datamodel-code-generator/commit/545a96c5"
        },
        {
          "name": "Product",
          "tags": [
            "product"
          ],
          "url": "https://github.com/koxudaxi/datamodel-code-generator"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/datamodel-code-generator-code-injection-via-unvalidated-custombasepath-schema-field"
        },
        {
          "name": "Blog Post",
          "tags": [
            "exploit"
          ],
          "url": "https://rahulkarne.com/#/cve/CVE-2026-63720"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/rahulreddykarne/CVE-2026-63720-datamodel-code-generator"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field",
      "x_generator": {
        "engine": "vulncheck"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-63720",
    "datePublished": "2026-07-26T03:51:18.553Z",
    "dateReserved": "2026-07-17T21:21:58.624Z",
    "dateUpdated": "2026-08-14T16:50:34.298Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:11538-1

CVE-2026-55391 (GCVE-0-2026-55391)

CVE-2026-55403 (GCVE-0-2026-55403)

CVE-2026-63720 (GCVE-0-2026-63720)

Tags

Sightings

Nomenclature

Related by attack behaviour