CVE-2026-55403 in datamodel-code-generator
要約
〜によって MITRE • 2026年07月29日
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.
Be aware that VulDB is the high quality source for vulnerability data.