https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:06:24.381963+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-173317 EUVD-2026-173317 2026-10-02T11:06:24.385938+00:00 EUVD-2026-173317 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10289 fkie_cve-2020-10289 2026-10-02T11:06:24.385970+00:00

Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creation of Python objects. Through this flaw in the ROS core package of actionlib, an attacker with local or remote access can make the ROS Master, execute arbitrary code in Python form. Consider yaml.safe_load() instead. Located first in actionlib/tools/library.py:132. See links for more info on the bug.

 https://cve.radiocsirt.org/vuln/ghsa-2x5j-2j53-xffv GHSA-2x5j-2j53-xffv 2026-10-02T11:06:24.386002+00:00

Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creation of Python objects. Through this flaw in the ROS core package of actionlib, an attacker with local or remote access can make the ROS Master, execute arbitrary code in Python form. Consider yaml.safe_load() instead. Located first in actionlib/tools/library.py:132. See links for more info on the bug.

 https://cve.radiocsirt.org/vuln/gsd-2020-10289 gsd-2020-10289 2026-10-02T11:06:24.386020+00:00 gsd-2020-10289 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-10289 UBUNTU-CVE-2020-10289 2026-10-02T11:06:24.386031+00:00

Affected: Ubuntu:16.04:LTS: ros-actionlib, Ubuntu:18.04:LTS: ros-actionlib, Ubuntu:20.04:LTS: ros-actionlib

Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creation of Python objects. Through this flaw in the ROS core package of actionlib, an attacker with local or remote access can make the ROS Master, execute arbitrary code in Python form. Consider yaml.safe_load() instead. Located first in actionlib/tools/library.py:132. See links for more info on the bug.