Description
Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | transmute-core | < 1.13.5 | 1.13.5 | GHSA-w9cp-3x79-2p8p |