Skip to content
OpenAdvisories

Package · Debian

django-tastypie

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2011-4104

    Django Tastypie Improper Deserialization of YAML Data

    The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

    django-tastypie django-tastypie Debian PyPI