CVE-2023-47204
9.8CRITICALUnsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.
Опубликовано: 11/2/2023Обновлено: 11/21/2024
Описание
Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.
ИИ-АнализНа базе ИИ
Затронутые продукты
toumorokoshitransmute-core
Ссылки
- https://github.com/toumorokoshi/transmute-core/pull/58Issue TrackingPatch
- https://github.com/toumorokoshi/transmute-core/releases/tag/v1.13.5Release Notes
- https://github.com/toumorokoshi/transmute-core/pull/58Issue TrackingPatch
- https://github.com/toumorokoshi/transmute-core/releases/tag/v1.13.5Release Notes