koxudaxi/fastapi-code-generator Security Advisories | GitStock

critical2026-11-09

CVE-2026-63471-fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

GHSA-p2mm-64f6-gmpp

critical2026-11-09

CVE-2026-63469-fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict

GHSA-6xmv-cjr5-w3q8

critical2026-11-09

CVE-2026-63470-fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring

GHSA-h667-4jj2-cgv4