https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T09:29:03.699308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-13388 CVE-2020-13388 2026-10-23T09:29:03.751201+00:00

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.

 https://cve.radiocsirt.org/vuln/ghsa-h72c-w3q3-55qq GHSA-h72c-w3q3-55qq — OS Command Injection in jw.util 2026-10-23T09:29:03.751255+00:00

Affected: PyPI: jw.util

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.