CVE-2021-27213

config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safeload are not used...

CVE-2021-27213

config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safeload are not used...

CVE-2021-27213

CVE-2021-27213 affects pystemon’s config.py, where YAML deserialization allows code execution because SafeLoader/safe_load are not used. Impact: potential arbitrary code execution via YAML input (high/critical). References indicate a fix was committed (dbeb87afefdb63de2f4cff69b6f10c5965d14b54); r...