DA
Product
dataclasses-avroschema
11
CVEs
0
On KEV
8.8
Max CVSS
11
New 30D
Severity mix
Critical 0High 11Medium 0Low 0
Watch
Add dataclasses-avroschema to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108385 | 8.8 | Oct 13 | dataclasses-avroschema enum symbols can inject statements through generated member names Affected: >= 0.38.0, < 0.70.6 |
| CVE-2026-108384 | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string Affected: >= 0.38.0, < 0.70.6 |
| CVE-2026-108383 | 8.8 | Oct 13 | dataclasses-avroschema enum field defaults can inject statements into generated modules Affected: >= 0.38.0, < 0.70.6 |
| CVE-2026-108382 | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through generated enum-symbol string literals Affected: >= 0.38.0, < 0.70.6 |
| CVE-2026-108381 | 8.8 | Oct 13 | dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations Affected: >= 0.44.0, < 0.70.6 |
| CVE-2026-108380 | 8.8 | Oct 13 | dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions Affected: >= 0.65.9, < 0.70.6 |
| CVE-2026-108379 | 8.8 | Oct 13 | dataclasses-avroschema fixed namespaces allow code injection in generated annotations Affected: >= 0.38.0, < 0.70.6 |
| CVE-2026-108378 | 8.8 | Oct 13 | dataclasses-avroschema record documentation can terminate generated class docstrings Affected: >= 0.40.0, < 0.70.6 |
| CVE-2026-108377 | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through generated Meta.schema_name Affected: >= 0.62.3, < 0.70.6 |
| CVE-2026-108376 | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through record names in generated default factories Affected: >= 0.47.3, < 0.70.6 |
| CVE-2026-108375 | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through generated field-default literals Affected: >= 0.38.0, < 0.70.6 |
Showing 11