THREATIST.IORead the docs No Pyyaml vulnerabilities are listed in CISA KEV.
4 records in Pyyaml · all components
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader…
In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data.
A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoade…
PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module.