Vulnerabilidades em koxudaxi
13 resultadosAnálise Vexday
Koxudaxi possui apenas 1 CVE registrado na base, recentemente publicado (últimos 90 dias), classificado como CWE-94 (Improper Control of Generation of Code) sem crítica aparente. Nenhuma exploração ativa foi detectada até o momento, indicando risco contido e sem pressão imediata de mitigação, porém recomenda-se monitorar a evolução dessa fraqueza de geração de código.
CVE-2026-63720HIGHdatamodel-code-generator Code Injection via Unvalidated customBasePath Schema FieldEPSS 0.4%CVE-2026-55389HIGHdatamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`EPSS 0.4%CVE-2026-54653HIGH`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema fieldEPSS 0.4%CVE-2026-55390HIGHArbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gateEPSS 0.4%CVE-2026-55415HIGHdatamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statementsEPSS 0.3%CVE-2026-54690HIGHdatamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)EPSS 0.2%CVE-2026-55403LOWdatamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemasEPSS 0.2%CVE-2026-54691HIGHdatamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirectsEPSS 0.2%CVE-2026-55391HIGHdatamodel-code-generator vulnerable to SSRF protection bypass via DNS rebindingEPSS 0.2%CVE-2026-54656HIGH`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-dataEPSS 0.2%CVE-2026-54655HIGH`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generatorEPSS 0.1%CVE-2026-54654HIGH`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` fieldEPSS 0.1%CVE-2026-54621HIGH`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union descriptionEPSS 0.1%