Skip to content
OpenAdvisories

Package · PyPI

django-piston

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2011-4103

    Django-piston and Django-tastypie do not properly deserialize YAML data

    emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

    django-piston PyPI