PT-2026-3641

Name of the Vulnerable Software and Affected Versions PLY Python Lex-Yacc version 3.11 Description An undocumented and unsafe feature in the PLY library allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with...