Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

dataclasses-avroschema — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in dataclasses-avroschema, with AI-generated Chinese analysis, references, and POCs.

Vendor: marcosschroh

CVE ID Title CVSS Severity Published
CVE-2026-108385 dataclasses-avroschema enum symbols can inject statements through generated member names CWE-94 8.8 High 2026-10-13
CVE-2026-108384 dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string CWE-94 8.8 High 2026-10-13
CVE-2026-108383 dataclasses-avroschema enum field defaults can inject statements into generated modules CWE-94 8.8 High 2026-10-13
CVE-2026-108382 dataclasses-avroschema allows code injection through generated enum-symbol string literals CWE-94 8.8 High 2026-10-13
CVE-2026-108381 dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations CWE-94 8.8 High 2026-10-13
CVE-2026-108380 dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions CWE-94 8.8 High 2026-10-13
CVE-2026-108379 dataclasses-avroschema fixed namespaces allow code injection in generated annotations CWE-94 8.8 High 2026-10-13
CVE-2026-108378 dataclasses-avroschema record documentation can terminate generated class docstrings CWE-94 8.8 High 2026-10-13
CVE-2026-108377 dataclasses-avroschema allows code injection through generated Meta.schema_name CWE-94 8.8 High 2026-10-13
CVE-2026-108376 dataclasses-avroschema allows code injection through record names in generated default factories CWE-94 8.8 High 2026-10-13
CVE-2026-108375 dataclasses-avroschema allows code injection through generated field-default literals CWE-94 8.8 High 2026-10-13

All 11 known CVE vulnerabilities affecting dataclasses-avroschema with full Chinese analysis, references, and POCs where available.