CVE-2021-41078

Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file...

CVE-2021-41078

Summary : CVE-2021-41078 affects Nameko up to version 2.13.0, where deserializing a YAML config file can trigger arbitrary code execution. The root cause is unsafe deserialization of configuration data, enabling an attacker to execute code via crafted config content. Impact : Arbitrary code execu...