PyPI/yamale CVE-2021-38305: high 7.8, EPSS 2.49%

Command injection in Yamale

Action: Upgrade yamale to 3.0.8 or later.

pip install yamale==3.0.8

Affected

Fixed versions

Sources

• osv: GHSA-435p-f82x-mxwm
• https://nvd.nist.gov/vuln/detail/CVE-2021-38305
• https://github.com/23andMe/Yamale/pull/165
• https://github.com/23andMe/Yamale
• https://github.com/23andMe/Yamale/releases/tag/3.0.8
• https://github.com/pypa/advisory-database/tree/main/vulns/yamale/PYSEC-2021-119.yaml

CVE-2021-38305 · published 2021-08-11T15:19:23Z · modified 2024-11-19T18:33:15.429434Z · JSON