Description
ymlref allows code injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ymlref | <= 0.1.1 | — | GHSA-8r8j-xvfj-36f9 |
| PyPI | ymlref | all versions | — | PYSEC-2018-103 |
Critical · 9.8
CVE-2018-20133
EUVD-2018-0147GHSA-8r8j-xvfj-36f9PYSEC-2018-103
Code injection in ymlref
Published Dec 17, 2018 · Updated Aug 5, 2024 · Assigned by mitre