https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:04:47.888593+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2011-4953 CVE-2011-4953 2026-10-04T19:04:47.890298+00:00

The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet.

 https://cve.radiocsirt.org/vuln/ghsa-hpj3-5p46-g87w GHSA-hpj3-5p46-g87w — Cobbler vulnerable to code injection via unsafe YAML loading 2026-10-04T19:04:47.890343+00:00

Affected: PyPI: cobbler

The `set_mgmt_parameters` function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the `yaml.load` function instead of the `yaml.safe_load function`, as demonstrated using Puppet.