Skip to contentMarcosschroh Dataclasses-avroschema vulnerabilities
- marcosschroh dataclasses-avroschemadataclasses-avroschema enum symbols can inject statements through generated member namesCVE-2026-1083858.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare stringCVE-2026-1083848.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema enum field defaults can inject statements into generated modulesCVE-2026-1083838.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through generated enum-symbol string literalsCVE-2026-1083828.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema pydantic-class metadata allows code injection in generated annotationsCVE-2026-1083818.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema field documentation allows code injection in generated Pydantic descriptionsCVE-2026-1083808.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema fixed namespaces allow code injection in generated annotationsCVE-2026-1083798.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema record documentation can terminate generated class docstringsCVE-2026-1083788.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through generated Meta.schema_nameCVE-2026-1083778.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through record names in generated default factoriesCVE-2026-1083768.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through generated field-default literalsCVE-2026-1083758.8 High