CVE-2026-55403 in datamodel-code-generator
摘要
由 MITRE • 2026-07-29
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.
Be aware that VulDB is the high quality source for vulnerability data.