PyPI/ymlref CVE-2018-20133: critical 9.8, EPSS 1.83%

Code injection in ymlref

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-8r8j-xvfj-36f9
• https://nvd.nist.gov/vuln/detail/CVE-2018-20133
• https://github.com/dexter2206/ymlref/issues/2
• https://github.com/dexter2206/ymlref
• https://github.com/pypa/advisory-database/tree/main/vulns/ymlref/PYSEC-2018-103.yaml

CVE-2018-20133 · published 2018-12-19T19:25:14Z · modified 2024-11-19T18:24:40.312866Z · JSON