Ruamel.yaml Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ruamel.yaml Project records in CISA KEV

No Ruamel.yaml Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Ruamel.yaml · all components

TI-2019-14705 CVE-2019-20478 · GHSA-xg77-mvwp-crp2

MEDIUM 52

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06834 Published 2020-02-19 Will not fix