Product
fastapi-code-generator versions prior to 0.8.1 contain a vulnerability that allows import-time remote code execution when processing malicious OpenAPI files by injecting arbitrary Python expressions into generated route decorators.