CVE-2017-18342

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

Yaml-Mako version 1.0.0 includes a security patch for the function 'load' in 'yaml_mako.py'. Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load(). See also: https://github.com/haarcuba/yaml_mako/commit/8e54bf48bf0a95495eaaf4e66cb42d8241c56f66#diff-98273dbb1f4888f07033576daad480b434f9fa909d2646e4a1e20f4691c9c757

Resources

• https://pypi.org/project/yaml-mako
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1747
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18342