Debian/ruamel.yaml: critical 9.8
In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unawa
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2019-20478#Debian:14/ruamel.yaml
- https://security-tracker.debian.org/tracker/CVE-2019-20478
published · modified · JSON