AIKIDO-2026-387198

TL;DR

When generating Python models from a GraphQL schema, datamodel-code-generator renders a Union type description into a # comment using a filter that only normalizes newline characters. A bare carriage return in a regular-string description terminates the comment line, so text after it is emitted as module-level Python that executes when the generated model is imported. An attacker who controls the GraphQL schema can inject arbitrary code with no special CLI flags. The fix normalizes carriage returns in Union descriptions before rendering them as comments.