CVE-2025-50460

CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...

CVE-2020-14343-PyYAML

CVE-2020-14343 PyYAML Deserialization Vulnerability POC Vulnerability Overview Item| Information ---|--- CVE ID| CVE-2020-14343 Affected Component| PyYAML Example: python poc.py http://vulnerable-site.com 192.168.1.100 4444 Attack Flow 1. The script starts a TCP listener locally 2. Uploads...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain Arbitrary Code Execution via CKPT.yaml Parsing Severity: High, CVSS 4.0 8.7 , CVSS 3.1 8.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected:...

loader-CVE-2020-14343

loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

docling-core-CVE-2026-24009

CVE-2026-24009 — docling-core Unsafe YAML Deserialization PoC + Notes This repo contains a proof-of-concept PoC and a simple scanner demonstrating CVE-2026-24009 , where docling-core can enable code execution when loading attacker-controlled YAML under specific dependency conditions. TL;DR Impact...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 Exploit To exploit the vulnerability, it is necessary to start a Docker container with an environment prepared to run Tensorflow with version 2.2.3 which still has the vulnerability. It consists of: An AMD 64-bit architecture, CPU or GPU that can execute AVX instructions Python...

cve-2020-14343-lab

CVE-2020-14343 – PyYAML Unsafe YAML Loading Lab 1. Project Overview This project demonstrates CVE-2020-14343 in a controlled and isolated Docker environment. The lab contains two environments: A vulnerable environment using PyYAML 5.3.1 A patched environment using PyYAML 5.4 and yaml.safeload The...

Astra Linux – Vulnerability in pyyaml

A vulnerability was discovered in the PyYAML library in versions prior to 5.4. In these versions, the library is susceptible to arbitrary code execution when it processes untrusted YAML files using the fullload method or the FullLoader loader. Applications that use this library to process untrust...

python313-PyYAML-6.0.3-1.6 on GA media (moderate)

python313-PyYAML-6.0.3-1.6 on GA media Announcement ID: openSUSE-SU-2026:11996-1 Rating: moderate Cross-References: CVE-2017-18342 CVE-2020-14343 CVSS scores: CVE-2017-18342 SUSE : 7.4 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-14343 SUSE : 8.8...

PT-2026-105705

These are all security issues fixed in the python313-PyYAML-6.0.3-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11996-1 python313-PyYAML-6.0.3-1.6 on GA media

These are all security issues fixed in the python313-PyYAML-6.0.3-1.6 package on the GA media of openSUSE Tumbleweed...

SUSE SLES12 Security Update : python-PyYAML (SUSE-SU-2026:4402-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4402-1 advisory. - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code...

Rocky Linux 8.6 [CIQ] Security Update: python39-pyyaml / python39-pyyaml-debuginfo Multiple Vulnerabilities (ciqsa-2026_0765)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260765 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / numpy-debugsource / etc (crlsa-2021_2583)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20212583 advisory. PyYAML: incomplete fix for CVE-2020-1747 CVE-2020-14343 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8.6 [CIQ] Security Update: python38-pyyaml / python38-pyyaml-debuginfo Multiple Vulnerabilities (ciqsa-2026_0218)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260218 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python39-pyyaml / python39-pyyaml-debuginfo (ciqsa-2026_0239)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260239 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding description...

Rocky Linux 8.8 [CIQ] Security Update: python39-pyyaml / python39-pyyaml-debuginfo (ciqsa-2026_1141)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261141 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding description blo...

Rocky Linux 8.6 [CIQ] Security Update: python2-pyyaml / python2-pyyaml-debuginfo Multiple Vulnerabilities (ciqsa-2026_0186)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260186 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / numpy-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4641)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204641 advisory. PyYAML: command execution through python/object/apply constructor in FullLoader CVE-2019-20477 python: infinite loop in the tarfile module via crafted TAR...

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: Update to 5.3.1. CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader...