CVE-2026-63471 - fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator
CVE ID :CVE-2026-63471 Published : Nov. 3, 2026, 8:18 p.m. | 46 minutes ago Description :fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an OpenAPI path into a generated @app.get(...) route decorator as a single-quoted generated...