ROS-2-1209

2.1209 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

ROS-2-932

2.932 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability coul...

ROS-2-539

2.539 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user-entered data when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the...

ROS-2-509

2.509 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability coul...

RHEL 8 : python27:2.7 (RHSA-2023:3780)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3780 advisory. Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types...

Malicious code in install-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b196a3a87537db3bd5691899d5c2481f27bcee88d6cf9e8576578929b376086 The OpenSSF Package Analysis project identified 'install-pyyaml' @ 1.19.12 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1372 Malicious code in install-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b196a3a87537db3bd5691899d5c2481f27bcee88d6cf9e8576578929b376086 The OpenSSF Package Analysis project identified 'install-pyyaml' @ 1.19.12 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1362 Malicious code in django-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b95436e2a145afcd7f459f6101c1d1b699d4d5842126d920fe77f700c8899b The OpenSSF Package Analysis project identified 'django-pyyaml' @ 20.17.15 pypi as malicious. It is considered malicious because: - The package...

Malicious code in django-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b95436e2a145afcd7f459f6101c1d1b699d4d5842126d920fe77f700c8899b The OpenSSF Package Analysis project identified 'django-pyyaml' @ 20.17.15 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pyyaml-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9582f8c7828335bcf6299260ea76656239fbbc52addbad1db96f04025109ead7 The OpenSSF Package Analysis project identified 'pyyaml-selenium' @ 1.15.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1398 Malicious code in pyyaml-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9582f8c7828335bcf6299260ea76656239fbbc52addbad1db96f04025109ead7 The OpenSSF Package Analysis project identified 'pyyaml-selenium' @ 1.15.3 pypi as malicious. It is considered malicious because: - The package...

Debian: Security Advisory (DLA-127-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2017-18342

In PyYAML before 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function...

SUSE CVE-2019-20477

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342...

SUSE CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2022:7581)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7581 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2021:2583)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2583 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

SUSE SLES12 Security Update : python-PyYAML (SUSE-SU-2022:3231-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3231-1 advisory. - CVE-2020-14343: Fixed a arbitrary code execution when processing untrusted YAML files through the fullload method or with the FullLoader...

SUSE-SU-2022:3231-1 Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: - CVE-2020-14343: Fixed a arbitrary code execution when processing untrusted YAML files through the fullload method or with the FullLoader loader. This Fixes an incomplete solution for CVE-2020-1747 bnc1174514...

SUSE SLES15 Security Update : python-PyYAML (SUSE-SU-2022:2841-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2841-1 advisory. - CVE-2020-1747: Fixed an arbitrary code execution issue when parsing an untrusted YAML file with the default loader bsc1165439. -...