What’s Vulnerable › Products

marcosschroh dataclasses-avroschema vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your marcosschroh dataclasses-avroschema version is affected

Latest marcosschroh dataclasses-avroschema vulnerabilities

• CVE-2026-108385 — dataclasses-avroschema enum symbols can inject statements through generated member names (CVSS 8.8)
• CVE-2026-108384 — dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string (CVSS 8.8)
• CVE-2026-108383 — dataclasses-avroschema enum field defaults can inject statements into generated modules (CVSS 8.8)
• CVE-2026-108382 — dataclasses-avroschema allows code injection through generated enum-symbol string literals (CVSS 8.8)
• CVE-2026-108381 — dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations (CVSS 8.8)
• CVE-2026-108380 — dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions (CVSS 8.8)
• CVE-2026-108379 — dataclasses-avroschema fixed namespaces allow code injection in generated annotations (CVSS 8.8)
• CVE-2026-108378 — dataclasses-avroschema record documentation can terminate generated class docstrings (CVSS 8.8)
• CVE-2026-108377 — dataclasses-avroschema allows code injection through generated Meta.schema_name (CVSS 8.8)
• CVE-2026-108376 — dataclasses-avroschema allows code injection through record names in generated default factories (CVSS 8.8)
• CVE-2026-108375 — dataclasses-avroschema allows code injection through generated field-default literals (CVSS 8.8)