Stranger6667/pyanyapi
GitHub
Releases8
Frequency3 months 2 weeks
Last Release
Stars13
Tools for convenient interface creation over various types of data in a declarative way.
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| — | 7.5 HIGH | ||
An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability. | |||