Skip to content
OpenAdvisories

Package · Azure Linux

PyYAML

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2020-14343 Public exploit

    Improper Input Validation in PyYAML

    A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the libra…

    pyyaml pyyaml pyyaml PyYAML Debian Ubuntu Azure Linux Alpine PyPI
  • Critical 9.8
    CVE-2020-1747

    Improper Input Validation in PyYAML

    A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the lib…

    Red Hat PyYAML pyyaml pyyaml Debian Azure Linux Alpine PyPI