Skip to content
OpenAdvisories

Archive

10 September 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.4
    CVE-2021-24040 Public exploit EPSS 17%

    Deserialization of Untrusted Data in parlai

    Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.

  • High 7.5
    CVE-2021-40839 Public exploit

    Infinite Loop in rencode

    The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.