Fedora 45 : perl-Dancer2 (2026-5e3eab9a07)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5e3eab9a07 advisory. Dancer2::Serializer::YAML::deserialize handed request bodies straight to YAML::Load. A body tagged !!perl/hash:Some::Class therefore instantiated an arbitrar...

Fedora 44 : perl-Dancer2 (2026-3b893ccf2d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3b893ccf2d advisory. Dancer2::Serializer::YAML::deserialize handed request bodies straight to YAML::Load. A body tagged !!perl/hash:Some::Class therefore instantiated an arbitrar...

CVE-2011-4104

CVE-2011-4104 affects Django Tastypie (older than 0.9.10). The vulnerability arises from the from_yaml deserialization in serializers.py, where YAML data is deserialized with yaml.load, allowing remote attackers to execute arbitrary Python code. The connected documents confirm the impact and vect...