A vulnerability classified as problematic has been found in koxudaxi datamodel-code-generator up to 0.60.1. This impacts the function
JsonSchemaObject.init/get_field_extras of the file src/datamodel_code_generator/parser/jsonschema.py of the component JsonSchemaParser. This manipulation causes code injection.
The identification of this vulnerability is CVE-2026-54653. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
