~ / search / GHSA-w9cp-3x79-2p8p

GHSA-w9cp-3x79-2p8p

transmute-core unsafe YAML deserialization vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-47204

Packages

EcosystemPackageAffectedFixed in
PyPI transmute-core < 1.13.5 1.13.5

Details

As written in the advisory (Markdown source, shown as plain text).

Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.

References

External links from the advisory. They lead to third-party sites.