AIKIDO-2026-971188

TL;DR

The datamodel-code-generator HTTP fetcher loads schemas from URLs passed via --url without validating hosts or redirect targets. With the [http] extra installed, an attacker who can influence the URL can reach loopback, private, link-local, or cloud metadata endpoints and reflect responses into generated Python source. Before the fix, redirects were followed unconditionally and only HTML responses were filtered. The patch validates HTTP(S) URLs, blocks non-public network targets by default, validates each redirect, and requires explicit opt-in for private network access.