All 3 CVE vulnerabilities found in fastapi-code-generator, with AI-generated Chinese analysis, references, and POCs.
Vendor: koxudaxi
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63471 | fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator CWE-94 | 9.3 | Critical | 2026-11-03 |
| CVE-2026-63469 | fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict CWE-94 | 9.3 | Critical | 2026-11-03 |
| CVE-2026-63470 | fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring CWE-94 | 9.3 | Critical | 2026-11-03 |
All 3 known CVE vulnerabilities affecting fastapi-code-generator with full Chinese analysis, references, and POCs where available.