CVE-2023-23619

Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to Code injection. This issue affects anyone who is using the default presets and/or does not handle the functionality themself. This issue has been partially mitigated in version 1.0.0, with the maintainer's GitHub Security Advisory (GHSA) noting "It is impossible to fully guard against this, because users have access to the original raw information. However, as of version 1, if you only access the constrained models, you will not encounter this issue. Further similar situations are NOT seen as a security issue, but intended behavior." The suggested workaround from the maintainers is "Fully custom presets that change the entire rendering process which can then escape the user input."

• CWE-94

• https://github.com/asyncapi/modelina/security/advisories/GHSA-4jg2-84c2-pj95Exploit, Third Party Advisory
• https://github.com/asyncapi/modelina/security/advisories/GHSA-4jg2-84c2-pj95Exploit, Third Party Advisory

Published

Jan 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23613OpenSearch is an open source distributed and RESTful search …6.5
• CVE-2023-23614Pi-hole®'s Web interface (based off of AdminLTE) provides a …8.8
• CVE-2023-23615Discourse is an open source discussion platform. The embedda…5.3
• CVE-2023-23616Discourse is an open-source discussion platform. Prior to ve…4.3
• CVE-2023-23617OpenMage LTS is an e-commerce platform. Versions prior to 19…7.5
• CVE-2023-23618Git for Windows is the Windows port of the revision control …7.8
• CVE-2023-2362The Float menu WordPress plugin before 5.0.2, Bubble Menu Wo…6.1
• CVE-2023-23620Discourse is an open-source discussion platform. Prior to ve…5.3
• CVE-2023-23621Discourse is an open-source discussion platform. Prior to ve…7.5
• CVE-2023-23622Discourse is an open-source discussion platform. Prior to ve…4.3
• CVE-2023-23623Electron is a framework which lets you write cross-platform …9.8
• CVE-2023-23624Discourse is an open-source discussion platform. Prior to ve…5.3