CVE-2026-108384 | marcosschroh dataclasses-avroschema up to 0.70.5 BaseGenerator.parse_fixed code injection

October 13, 2026 Yanac

A vulnerability was found in marcosschroh dataclasses-avroschema up to 0.70.5. It has been rated as critical. Affected by this vulnerability is the function BaseGenerator.parse_fixed. Performing a manipulation results in code injection.

This vulnerability is cataloged as CVE-2026-108384. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More