Advisories · Technology
marcosschroh dataclasses-avroschema.
Every CVE that names marcosschroh dataclasses-avroschema among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
dataclasses-avroschema enum symbols can inject statements through generated member names
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema enum field defaults can inject statements into generated modules
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema allows code injection through generated enum-symbol string literals
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema fixed namespaces allow code injection in generated annotations
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema record documentation can terminate generated class docstrings
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema allows code injection through generated Meta.schema_name
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema allows code injection through record names in generated default factories
- marcosschroh dataclasses-avroschema
- Code injection
- CVSS 8.8 High
dataclasses-avroschema allows code injection through generated field-default literals
- marcosschroh dataclasses-avroschema
- Code injection