Datamodel-code-generator vulnerabilities
We track 2 vulnerabilities in Datamodel-code-generator products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Datamodel-code-generator vulnerabilities
- 8.8 High severity
datamodel-code-generator: Improper Control of Generation of Code
datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary code execution by supplying a malicious JSON Schema with a crafted x-python-type annotation containing a string ast.Constant node in a sub
- 7.5 High severity
datamodel-code-generator: Improper Limitation of a Pathname to a Restricted Directory
datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAK_IMPORT_PATTERN and consumed by _write_missing_weak_im