Namespace Vulnerability in dataclasses-avroschema Affecting Multiple Versions

CVE-2026-108385

What is CVE-2026-108385?

A vulnerability in dataclasses-avroschema versions 0.38.0 to 0.70.5 allows attackers to manipulate enum member names due to insufficient validation during case conversion. This can lead to the injection of newlines and punctuation, potentially altering the generated enum class body and compromising module integrity. Users are advised to upgrade to version 0.70.6, which addresses this issue by ensuring that all enum symbols are validated as valid identifiers.

References