CVE-2026-107377 | datamodel-code-generator up to 0.80.x Protobuf Parser protobuf.py _write_missing_weak_imports path traversal

A vulnerability identified as problematic has been detected in datamodel-code-generator up to 0.80.x. Affected by this issue is the function _write_missing_weak_imports of the file src/datamodel_code_generator/parser/protobuf.py of the component Protobuf Parser. Performing a manipulation results in path traversal.

This vulnerability is known as CVE-2026-107377. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More