Threats Tagged 'cve-2026-107377'
View all threats tagged with 'cve-2026-107377'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-107377'
Click on any threat for detailed analysis and mitigation recommendations
0 A path traversal vulnerability in datamodel-code-generator versions >=0.59.0 and <0.81.0 allows attacker-controlled Protobuf schemas to write files outside the intended temporary directory. The vulnerability arises from improper handling of absolute and relative import paths in weak-import stubs, enabling creation or overwriting of files in writable locations. The written content is limited to a fixed Protobuf syntax declaration, and no direct arbitrary code execution has been demonstrated. The issue occurs before the Protobuf compiler runs and is triggered when processing attacker-controlled schemas via local files or URLs. A fix has been merged but no patched package release is yet available. Join the discussion | GCVE Database | 10/08/2026, 17:58:01 UTC Added: 10/08/2026, 21:48:36 UTC |
Showing 1 to 1 of 1 result