https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T11:22:36.467697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04465 bdu:2020-04465 2026-10-23T11:22:36.577607+00:00 bdu:2020-04465 https://cve.radiocsirt.org/vuln/cnvd-2020-31711 cnvd-2020-31711 2026-10-23T11:22:36.577645+00:00 cnvd-2020-31711 https://cve.radiocsirt.org/vuln/euvd-2026-41733 EUVD-2026-41733 2026-10-23T11:22:36.577660+00:00 EUVD-2026-41733 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13388 fkie_cve-2020-13388 2026-10-23T11:22:36.577671+00:00

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.

 https://cve.radiocsirt.org/vuln/ghsa-h72c-w3q3-55qq GHSA-h72c-w3q3-55qq — OS Command Injection in jw.util 2026-10-23T11:22:36.577700+00:00

Affected: PyPI: jw.util

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.

 https://cve.radiocsirt.org/vuln/gsd-2020-13388 gsd-2020-13388 2026-10-23T11:22:36.577723+00:00 gsd-2020-13388 https://cve.radiocsirt.org/vuln/pysec-2020-341 PYSEC-2020-341 2026-10-23T11:22:36.577735+00:00

Affected: PyPI: jw.util

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.