81 matches found
GHSA-GCR6-RF47-JRGF Loaded Databook of Tablib prone to python insertion resulting in command execution
An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability...
9.8CVSS6.1AI score0.0487EPSS
SaveExploits2References7
20