CVE ID :CVE-2026-63470 Published : Nov. 3, 2026, 8:18 p.m. | 46 minutes ago Description :fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts Operation.summary into a generated route-handler docstring as a triple-double-quoted string...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-63470 - fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring

VERWANDTEARTIKEL

CVE-2026-82158 - Dell Wyse Management Suite Cross-Site Scripting Vulnerability

CVE-2026-115731 - Report Deserialization Code Execution

CVE-2026-115732 - Certificate Name Authorization Bypass

CVE-2026-95738 - Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer

CVE-2026-95739 - Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HPE Networking Fabric Composer

CVE-2026-95740 - Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer