« List of all CVEs

CVE-2017-18342

Published: 6/27/2018 Last updated: 8/5/2024 Reserved: 6/27/2018

In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-python3-yaml

Products affected (1)

Product Vendor Version
n/a n/a 10 Version 1809 for x64-based Systems

References (18)