| Package | Affected versions | Patched versions |
|---|---|---|
| sqla-yaml-fixtures | ≤ 0.9.1< 1.0.0 | 1.0.0 |
| sqla yaml fixtures | = 0.9.1 |
Sqla_yaml_fixtures versions up to 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free