{"metadata": {"vulnerability": "CVE-2026-55390", "count": 18, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-16T18:57:40.183Z", "date_only": false, "value": "2026-06-16T18:57:40.183Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-55390", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-28T21:25:32.208Z", "date_only": false, "value": "2026-07-28T21:25:32.208Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-55390", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-28T21:25:32.208Z", "date_only": false, "value": "2026-07-28T21:25:32.208Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-55390", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-28T21:26:41Z", "date_only": false, "value": "2026-07-28T21:26:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-442Q-2J6P-642G", "record": "GHSA-442Q-2J6P-642G", "field": "published"}, {"timestamp": "2026-07-28T21:26:41Z", "date_only": false, "value": "2026-07-28T21:26:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-442Q-2J6P-642G", "record": "GHSA-442Q-2J6P-642G", "field": "modified"}, {"timestamp": "2026-07-28T22:17:48.557Z", "date_only": false, "value": "2026-07-28T22:17:48.557", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55390", "record": "FKIE_CVE-2026-55390", "field": "published"}, {"timestamp": "2026-07-28T22:35:32.178Z", "date_only": false, "value": "2026-07-28T22:35:32.178041Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g", "record": "CVE-2026-55390", "field": "creation_timestamp", "uuid": "a8914a43-9829-46cd-8a4c-67f5257176a1", "url": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g"}, {"timestamp": "2026-07-28T23:01:03.976Z", "date_only": false, "value": "2026-07-28T23:01:03.976616Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q", "record": "CVE-2026-55390", "field": "creation_timestamp", "uuid": "da44d174-7b47-45dc-8ba7-0e780b1bafde", "content": "\ud83d\udfe0 CVE-2026-55390 - High (7.5)\n\ndatamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55390/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q"}, {"timestamp": "2026-07-28T23:40:45.962Z", "date_only": false, "value": "2026-07-28T23:40:45.962561Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlj43wks2q", "record": "CVE-2026-55390", "field": "creation_timestamp", "uuid": "bf98a099-6c6f-46a1-8b4a-fba84777a9dd", "content": "CVE-2026-55390 - Arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate\nCVE ID : CVE-2026-55390\n \n Published : July 28, 2026, 10:17 p.m. | 22\u00a0minutes ago\n \n Description : datamodel-code-generator generates Python d...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlj43wks2q"}, {"timestamp": "2026-07-29T00:04:24.536Z", "date_only": false, "value": "2026-07-29T00:04:24.536581Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrqmtex4p224", "record": "CVE-2026-55390", "field": "creation_timestamp", "uuid": "1b11747b-d694-4d78-8d67-51d917b4376d", "content": "A Python Model Bug Ships First; Czech Awareness Arrives After Lunch\nPANIC 52% | Lag 0.0h | datamodel-code-generator versions from 0.59.0 onward are affected by CVE-2026-55390, a high-severity\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrqmtex4p224"}, {"timestamp": "2026-07-29T14:12:44.698Z", "date_only": false, "value": "2026-07-29T14:12:44.698957Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55390", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-29T14:12:44.698Z", "date_only": false, "value": "2026-07-29T14:12:44.698957Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55390", "record": "FKIE_CVE-2026-55390", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-29T14:16:03.510Z", "date_only": false, "value": "2026-07-29T14:16:03.510Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-55390", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-29T14:16:03.510Z", "date_only": false, "value": "2026-07-29T14:16:03.510Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55390", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-29T17:02:28.295Z", "date_only": false, "value": "2026-07-29T17:02:28.295338Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrsfpsthfv27", "record": "CVE-2026-55390", "field": "creation_timestamp", "uuid": "625d0675-93ff-4506-944c-d65c44b8d6f5", "content": "CVE-2026-55390 - High severity path traversal in datamodel-code-generator 0.59.0-0.62.0. Arbitrary local file read via XML schema imports. CVSS 7.5. Update to 0.62.0 immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55390/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrsfpsthfv27"}, {"timestamp": "2026-07-30T20:02:44.977Z", "date_only": false, "value": "2026-07-30T20:02:44.977", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55390", "record": "FKIE_CVE-2026-55390", "field": "lastModified"}, {"timestamp": "2026-08-04T11:34:44.024Z", "date_only": false, "value": "2026-08-04T11:34:44.024456Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-3556", "record": "PYSEC-2026-3556", "field": "published"}, {"timestamp": "2026-08-04T13:36:15.141Z", "date_only": false, "value": "2026-08-04T13:36:15.141826Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-3556", "record": "PYSEC-2026-3556", "field": "modified"}]}