Exploited: 177
LatestCVE-2026-63471 — fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator
VulnFeed.org
AREN
8.4
CVE-2026-58837Verify fix

In multiple locations, there is a possible background activity launch due to a logic error in the code.

Google Android1 min readRead in

Summary

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Remediation

References

Esc