4 matches found
EUVD-2019-2175
Malware in sbrugna...
7.2CVSS7AI score0.01886EPSS
SaveExploits0References3
EUVD-2024-0055
Malicious code in bioql PyPI...
9.8CVSS9.2AI score0.01059EPSS
SaveExploits0References4
CVE-2019-10135
A flaw was found in the yaml.load function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files...
7.2CVSS7.2AI score0.01886EPSS
SaveExploits0References2
Remote Code Execution (RCE)
pyyaml is vulnerable to remote code execution RCE attacks. The application uses the unsafe function yaml.load, allowing a malicious user to inject and execute arbitrary code by passing a yaml file...
9.8CVSS9.7AI score0.0561EPSS
SaveExploits1References15Affected Software1
20