PyPI/datamodel-code-generator CVE-2026-55391: high 7.5, EPSS 0.30%

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

Action: Upgrade datamodel-code-generator to 0.63.0 or later.

pip install datamodel-code-generator==0.63.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3565
• https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-vx7x-vcc2-c44g
• https://github.com/koxudaxi/datamodel-code-generator/commit/25c8b7e497419eb20b230fa3318c04f9bebc5a6f
• https://github.com/koxudaxi/datamodel-code-generator
• https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.63.0
• https://pypi.org/project/datamodel-code-generator
• https://github.com/advisories/GHSA-vx7x-vcc2-c44g
• https://nvd.nist.gov/vuln/detail/CVE-2026-55391

CVE-2026-55391 · published 2026-08-04T11:34:44.565553Z · modified 2026-08-04T14:30:15.997991650Z · JSON