CVE-2026-54656 | koxudaxi datamodel-code-generator up to 0.60.1 Validator Processing base_model.py _process_validators extra-template-data code injection

July 29, 2026 Yanac

A vulnerability classified as problematic was found in koxudaxi datamodel-code-generator up to 0.60.1. Affected is the function _process_validators of the file src/datamodel_code_generator/model/pydantic_v2/base_model.py of the component Validator Processing. Such manipulation of the argument extra-template-data leads to code injection.

This vulnerability is referenced as CVE-2026-54656. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More