EUVD-2026-50070
GHSA-r5vv-ff45-prp2
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack requires redirect to different origin (complex), no privileges needed, only confidential headers leaked.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.
AnalysisAI
Sensitive header disclosure in datamodel-code-generator allows Authorization, Cookie, and Proxy-Authorization headers to be leaked to cross-origin redirect targets when fetching remote schemas. Affects versions prior to 0.63.0. A public proof-of-concept exploit exists, but no active exploitation has been reported and the CVSS score is low (3.7).
Technical ContextAI
The vulnerability resides in the HTTP request handling of datamodel-code-generator, a Python tool that generates data models from schema definitions. It uses the httpx library to fetch remote schemas, but the get_body() function manually follows redirects without stripping sensitive headers when the redirect changes origin (scheme, host, or port). This violates the same-origin credential scoping behavior that browsers and standard HTTP clients enforce, leading to CWE-200 (Information Exposure). The CPE cpe:2.3:a:koxudaxi:datamodel-code-generator:*:*:*:*:*:*:* covers all versions, with the fix introduced in commit a585c037c8307b7aae815de193b7fe1c4c44994b.
RemediationAI
Upgrade to datamodel-code-generator version 0.63.0 or later, which drops Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects. The fix is implemented in commit a585c037c8307b7aae815de193b7fe1c4c44994b. If immediate upgrade is not possible, avoid using the --http-headers option with credentials and do not include userinfo in the --url parameter when fetching schemas from untrusted or redirect-prone hosts. Note that disabling credential submission may break access to schemas that require authentication; the only complete fix is to upgrade.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today