{"action":"Upgrade nameko to 2.14.0 or later.","affected":[{"fixed":"2.14.0","introduced":"0"},{"fixed":"3.0.0rc10","introduced":"3.0.0rc0"}],"component":"nameko","cve_ids":["CVE-2021-41078"],"ecosystem":"PyPI","epss":0.01537,"exploited":false,"fixed_versions":["2.14.0","3.0.0rc10"],"ghsa_id":"GHSA-6p52-jr3q-c94g","id":"tcs_01M5KF3SX8WE4NWH908J24FJR8","modified_at":"2026-07-08T06:28:18.118772770Z","published_at":"2021-10-19T15:28:57Z","references":["https://osv.dev/vulnerability/GHSA-6p52-jr3q-c94g","https://github.com/nameko/nameko/security/advisories/GHSA-6p52-jr3q-c94g","https://nvd.nist.gov/vuln/detail/CVE-2021-41078","https://github.com/nameko/nameko","https://github.com/nameko/nameko/releases/tag/v2.14.0","https://github.com/nameko/nameko/releases/tag/v3.0.0-rc10","https://github.com/pypa/advisory-database/tree/main/vulns/nameko/PYSEC-2021-383.yaml"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-6p52-jr3q-c94g","url":"https://osv.dev/vulnerability/GHSA-6p52-jr3q-c94g"}],"summary":"Nameko Arbitrary code execution due to YAML deserialization"}