Fastapi-Code-Generator (< 0.8.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/fastapi-code-generator--0.8.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 03 Nov 2026 21:27:38 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgfastapi-code-generator: Import-time remote code execution (CVE-2026-63471)https://feed.craftedsignal.io/briefs/2026-11-fastapi-code-generator-rce/Tue, 03 Nov 2026 21:27:38 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-fastapi-code-generator-rce/fastapi-code-generator versions prior to 0.8.1 contain a vulnerability that allows import-time remote code execution when processing malicious OpenAPI files by injecting arbitrary Python expressions into generated route decorators.highadvisoryrcepythonsupply-chain