https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T08:37:39.985207+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-116672 EUVD-2026-116672 2026-10-16T08:37:39.988727+00:00 EUVD-2026-116672 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4104 fkie_cve-2011-4104 2026-10-16T08:37:39.988774+00:00

The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

 https://cve.radiocsirt.org/vuln/ghsa-qgvw-qc2q-gv5q GHSA-qgvw-qc2q-gv5q — Django Tastypie Improper Deserialization of YAML Data 2026-10-16T08:37:39.988814+00:00

Affected: PyPI: django-tastypie

The `from_yaml` method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

 https://cve.radiocsirt.org/vuln/gsd-2011-4104 gsd-2011-4104 2026-10-16T08:37:39.988841+00:00 gsd-2011-4104 https://cve.radiocsirt.org/vuln/pysec-2014-25 PYSEC-2014-25 2026-10-16T08:37:39.988854+00:00

Affected: PyPI: django-tastypie

The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.