CVE-2017-18342

9.8

CRITICALCVSS v3

Published

June 27, 2018

CVSS v2

7.5 HIGH

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.

yaml/pyyaml

GitHubCanonical source repository for PyYAML

< 5.1NVD

marshmallow-code/apispec

GitHubA pluggable API specification generator. Currently supports the OpenAPI Specification (f.k.a. the Swagger specification)..

NVD

fedora

Docker Hub

More on this CVE

NVD↗GitHub Advisory↗

Official Docker builds of Fedora

= 28, = 29, = 30NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 28, = 29, = 30NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 28, = 29, = 30NVD

Security Advisories

CVE-2017-18342

Description

More on this CVE