CVE search

401.051 vulnerabilities · 1766 actively exploited (CISA KEV)

4 results

ID	Severity	Summary	Published
CVE-2020-14343	CRITICO9.8	A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw.	09/02/2021
CVE-2020-1747	CRITICO9.8	A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this fla	24/03/2020
CVE-2019-20477	CRITICO9.8	PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.