CVE-2026-55403 in datamodel-code-generator
Tóm tắt
Bởi MITRE • 29/07/2026
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.
Be aware that VulDB is the high quality source for vulnerability data.