PY
Vendor
Pyyaml
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-14343 | PY Pyyaml Pyyaml | 9.8 | Feb 9 | A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the… |
| CVE-2020-1747 | PY Pyyaml Pyyaml | 9.8 | Mar 24 | A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through… |
| CVE-2019-20477 | PY Pyyaml Pyyaml | 9.8 | Feb 19 | PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module |
| CVE-2017-18342 | PY Pyyaml Pyyaml | 9.8 | Jun 27 | In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data |
| CVE-2014-9130 | LI Libyaml Pyyaml | – | Dec 8 | scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure… |
| CVE-2014-2525 | LI Libyaml Pyyaml | – | Mar 28 | Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of… |
| CVE-2013-6393 | LI Libyaml Pyyaml | – | Feb 6 | The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application… |