Skip to content
OpenAdvisories

Package · PyPI

vcrpy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    GHSA-rpj2-4hq8-938g

    VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette files

    ### Summary vcrpy deserializes YAML cassette files with PyYAML's object-constructing loader (`yaml.CLoader` / `yaml.Loader`) instead of the safe loader (`yaml.CSafeLoader` / `yaml.SafeLoader`). A cassette containing a `!!python/object/apply:` (or similar) tag…

    vcrpy PyPI