{"vulnerability": "cve-2026-5539", "sightings": [{"uuid": "1af4262f-3494-4300-b89a-159147d0135d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mipwodhauf2j", "content": "", "creation_timestamp": "2026-04-05T04:41:08.401102Z"}, {"uuid": "929db322-a4f1-4d93-89b3-da9f4f898095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55399", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptkgjxg2x", "content": "\ud83d\udea8 EUVD-2026-44805\n\ud83d\udcca 5.1/10\n\ud83c\udfe2 Absolute Security\n\n\ud83d\udcdd CVE-2026-55399 is a resource exhaustion\nvulnerability in the Secure Access publisher prior to 14.55. Attackers with\nvalid credentials to the Sec...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44805\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-15T22:00:20.142668Z"}, {"uuid": "e1abad96-6de5-4bf7-be75-01a0c9c6b4bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55398", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptm4mdb2w", "content": "\ud83d\udea8 EUVD-2026-44803\n\ud83d\udcca 6.9/10\n\ud83c\udfe2 Absolute Security\n\n\ud83d\udcdd CVE-2026-55398\nis a memory management vulnerability in Secure Access clients and servers prior\nto 14.55. Attackers with intimate knowledge of an...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44803\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-15T22:00:21.819947Z"}, {"uuid": "5029707d-52e6-4966-8892-a596f36478ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55391", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-vx7x-vcc2-c44g", "content": "", "creation_timestamp": "2026-07-28T22:35:11.039527Z"}, {"uuid": "a8914a43-9829-46cd-8a4c-67f5257176a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55390", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g", "content": "", "creation_timestamp": "2026-07-28T22:35:32.178041Z"}, {"uuid": "da44d174-7b47-45dc-8ba7-0e780b1bafde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q", "content": "\ud83d\udfe0 CVE-2026-55390 - High (7.5)\n\ndatamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55390/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T23:01:03.976616Z"}, {"uuid": "7c31a1c9-8f97-4e64-82fb-fde7618a48f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55391", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjccj7di2u", "content": "\ud83d\udfe0 CVE-2026-55391 - High (7.5)\n\ndatamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55391/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T23:01:10.834681Z"}, {"uuid": "bf98a099-6c6f-46a1-8b4a-fba84777a9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlj43wks2q", "content": "CVE-2026-55390 - Arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate\nCVE ID : CVE-2026-55390\n \n Published : July 28, 2026, 10:17 p.m. | 22\u00a0minutes ago\n \n Description : datamodel-code-generator generates Python d...", "creation_timestamp": "2026-07-28T23:40:45.962561Z"}, {"uuid": "fe1fd970-6d5c-401b-a854-9d02f5ca08bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55391", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqmdxhwl22q", "content": "CVE-2026-55391 - datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding\nCVE ID : CVE-2026-55391\n \n Published : July 28, 2026, 10:17 p.m. | 22\u00a0minutes ago\n \n Description : datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, an...", "creation_timestamp": "2026-07-28T23:55:46.995439Z"}, {"uuid": "1b11747b-d694-4d78-8d67-51d917b4376d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrqmtex4p224", "content": "A Python Model Bug Ships First; Czech Awareness Arrives After Lunch\nPANIC 52% | Lag 0.0h | datamodel-code-generator versions from 0.59.0 onward are affected by CVE-2026-55390, a high-severity\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-29T00:04:24.536581Z"}, {"uuid": "71f2c40d-6fea-4729-8293-0715dbb3e1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55391", "type": "seen", "source": "https://gist.github.com/alon710/73a1f99f69f48acfb8cc74440bebaced", "content": "# CVE-2026-55391: CVE-2026-55391: Server-Side Request Forgery Bypass via DNS Rebinding in datamodel-code-generator\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55391\n\n## Summary\nCVE-2026-55391 is a server-side request forgery (SSRF) bypass vulnerability in the datamodel-code-generator package. The vulnerability occurs due to a Time-of-Check to Time-of-Use (TOCTOU) race condition during DNS resolution, combined with a failure to inspect embedded IPv4-in-IPv6 address mappings. By deploying a malicious DNS server with a low Time-To-Live (TTL) configuration, an attacker can bypass private address blocklists and coerce the application to connect to internal services or local endpoints.\n\n## TL;DR\nA Time-of-Check to Time-of-Use (TOCTOU) DNS vulnerability in datamodel-code-generator allows remote attackers to bypass SSRF protections using DNS rebinding or IPv6-mapped IPv4 addresses, exposing internal networks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918 (SSRF), CWE-367 (TOCTOU)\n- **Attack Vector**: Network\n- **Attack Complexity**: High\n- **CVSS v3.1 Score**: 7.5\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- datamodel-code-generator python package\n- **datamodel-code-generator**: >= 0.50.0, < 0.63.0 (Fixed in: `0.63.0`)\n\n## Mitigation\n\n- Implement DNS pinning at the socket or transport layer to prevent independent DNS resolution passes.\n- Unwrap IPv6-encapsulated IPv4 configurations to detect hidden private addresses.\n- Use isolated container networks with egress rules to block private IP space connections.\n\n**Remediation Steps:**\n1. Update the datamodel-code-generator dependency to version 0.63.0 or greater.\n2. Ensure validation protocols explicitly block legacy IP notations and IPv6 mapping formats.\n3. Configure cloud host firewalls to restrict local loopback and metadata access from worker environments.\n\n## References\n\n- [Fix Commit](https://github.com/koxudaxi/datamodel-code-generator/commit/25c8b7e497419eb20b230fa3318c04f9bebc5a6f)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55391) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T12:32:38.548212Z"}, {"uuid": "625d0675-93ff-4506-944c-d65c44b8d6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrsfpsthfv27", "content": "CVE-2026-55390 - High severity path traversal in datamodel-code-generator 0.59.0-0.62.0. Arbitrary local file read via XML schema imports. CVSS 7.5. Update to 0.62.0 immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55390/", "creation_timestamp": "2026-07-29T17:02:28.295338Z"}]}