https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:33:09 +0000 https://vulnerability.circl.lu/vuln/cve-2019-20477 <p>PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.</p> <p>PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.</p> https://vulnerability.circl.lu/vuln/cve-2019-20477 https://vulnerability.circl.lu/vuln/ghsa-3pqx-4fqf-j49f <p><strong>Affected:</strong> PyPI: pyyaml</p> <p>PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.</p> <p><strong>Affected:</strong> PyPI: pyyaml</p> <p>PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.</p> https://vulnerability.circl.lu/vuln/ghsa-3pqx-4fqf-j49f https://vulnerability.circl.lu/vuln/pysec-2020-176 <p><strong>Affected:</strong> PyPI: pyyaml</p> <p>PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.</p> <p><strong>Affected:</strong> PyPI: pyyaml</p> <p>PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.</p> https://vulnerability.circl.lu/vuln/pysec-2020-176