PatchTheCVEdatamodel-code-generator vulnerabilities and fixes
Recent CVEs affecting datamodel-code-generator, with upgrade or downgrade steps. 6 tracked.
datamodel-code-generator has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-07-28. Highest priority: CVE-2026-54653 (score 49/100).
- CVE-2026-54653 HIGH 8.8 UPGRADE datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI
- CVE-2026-55389 HIGH 7.5 UPGRADE datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI
- CVE-2026-54690 HIGH 8.2 UPGRADE datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI
- CVE-2026-55391 HIGH 7.5 UPGRADE datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI
- CVE-2026-55415 HIGH 7.5 UPGRADE datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI
- CVE-2026-54656 HIGH 7.8 UPGRADE datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI
FAQ
How do I fix datamodel-code-generator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is datamodel-code-generator being exploited right now?
None of the tracked datamodel-code-generator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which datamodel-code-generator CVE should I patch first?
CVE-2026-54653 currently ranks highest (49/100): datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI.