7 matches found
jumeaux (>=0.1.0, <=0.7.0) potentially affected by CVE-2017-16618 via owlmixin (1.2.0a1)
owlmixin PYPI version 1.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on owlmixin and may be impacted: - jumeaux =0.1.0, =0.7.0 Source cves: CVE-2017-16618 Source advisory: OSV:GHSA-CCMQ-QVCP-5MRM...
jumeaux (>=0.8.0, <=0.11.1) potentially affected by CVE-2017-16618 via owlmixin (1.2.0)
owlmixin PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on owlmixin and may be impacted: - jumeaux =0.8.0, =0.11.1 Source cves: CVE-2017-16618 Source advisory: OSV:GHSA-CCMQ-QVCP-5MRM...
jumeaux (>=0.12.0, <=0.30.1) potentially affected by CVE-2017-16618 via owlmixin (>=2.0.0a7, <=2.0.0a12)
owlmixin PYPI version =2.0.0a7, =0.12.0, =0.30.1 Source cves: CVE-2017-16618 Source advisory: OSV:GHSA-CCMQ-QVCP-5MRM...
jumeaux (>=0.1.0, <=0.7.0) potentially affected by CVE-2017-16618 via owlmixin (1.2.0a1)
owlmixin PYPI version 1.2.0a1 is affected by a known vulnerability. The following packages have a transitive dependency on owlmixin and may be impacted: - jumeaux =0.1.0, =0.7.0 Source cves: CVE-2017-16618 Source advisory: OSV:PYSEC-2017-22...
jumeaux (>=0.12.0, <=0.30.1) potentially affected by CVE-2017-16618 via owlmixin (>=2.0.0a7, <=2.0.0a12)
owlmixin PYPI version =2.0.0a7, =0.12.0, =0.30.1 Source cves: CVE-2017-16618 Source advisory: OSV:PYSEC-2017-22...
CVE-2017-16618
An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file aka loadyaml or loadyamlf can execute arbitrary Python commands resulting in command execution because load is used where safeload should have been used. An...