CVE-2020-10289

Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creation of Python objects. Through this flaw in the ROS core package of actionlib...

PT-2020-12038

Name of the Vulnerable Software and Affected Versions actionlib affected versions not specified Description The issue is caused by an unsafe parsing of YAML values in the ROS core package of actionlib, allowing the instantiation of arbitrary objects. This occurs when an action message is processe...