Advisories · Technology
koxudaxi fastapi-code-generator.
Every CVE that names koxudaxi fastapi-code-generator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator
- koxudaxi fastapi-code-generator
- Code injection
- CWE-116
- CVSS 9.3 CriticalCritical · CVSS 9+
fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict
- koxudaxi fastapi-code-generator
- Code injection
- CWE-116
- CVSS 9.3 CriticalCritical · CVSS 9+
fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring
- koxudaxi fastapi-code-generator
- Code injection
- CWE-116