Skip to content
OpenAdvisories
Critical DSA-2344-1 1 CVE

python-django-piston - deserialization vulnerability

Published Nov 11, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 python-django-piston 0.2.2-1+squeeze1

Vulnerabilities 1

  • Critical 9.8
    CVE-2011-4103

    Django-piston and Django-tastypie do not properly deserialize YAML data

    emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

    django-piston PyPI