Malicious code in nvidia-nat-semantic-kernel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe66a4b0f7f00b8e8a9abd877b3ab0531d56906cc11f6fa6ecaddd4b0bebbbe1 The package's METADATA declares Requires-Dist: ruamel-yaml-clibz==0.3.5, a typosquat of the well-known ruamel-yaml-clib note the trailing 'z'...

MAL-2026-4760 Malicious code in nvidia-nat-semantic-kernel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe66a4b0f7f00b8e8a9abd877b3ab0531d56906cc11f6fa6ecaddd4b0bebbbe1 The package's METADATA declares Requires-Dist: ruamel-yaml-clibz==0.3.5, a typosquat of the well-known ruamel-yaml-clib note the trailing 'z'...

Malicious code in ruamel-yaml (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ruamel-yaml-clib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2973 Malicious code in ruamel-yaml-clib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2972 Malicious code in ruamel-yaml (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2019-20478

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safeload in these use cases...

DEBIAN-CVE-2019-20478

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safeload in these use cases...

UBUNTU-CVE-2019-20478

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safeload in these use cases...

ruamel.yam deserialization vulnerability

ruamel.yaml is a YAML parser. A security vulnerability exists in ruamel.yaml version 0.16.7 and earlier. An attacker can exploit the vulnerability to execute code...