MA
Vendor
marcosschroh
11
CVEs
0
On KEV
11
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108385 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema enum symbols can inject statements through generated member names |
| CVE-2026-108384 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string |
| CVE-2026-108383 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema enum field defaults can inject statements into generated modules |
| CVE-2026-108382 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through generated enum-symbol string literals |
| CVE-2026-108381 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations |
| CVE-2026-108380 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions |
| CVE-2026-108379 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema fixed namespaces allow code injection in generated annotations |
| CVE-2026-108378 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema record documentation can terminate generated class docstrings |
| CVE-2026-108377 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through generated Meta.schema_name |
| CVE-2026-108376 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through record names in generated default factories |
| CVE-2026-108375 | DA dataclasses-avroschema marcosschroh | 8.8 | Oct 13 | dataclasses-avroschema allows code injection through generated field-default literals |
