Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 08:37:39 +0000 EUVD-2026-116672 https://cve.radiocsirt.org/vuln/euvd-2026-116672 EUVD-2026-116672 https://cve.radiocsirt.org/vuln/euvd-2026-116672 fkie_cve-2011-4104 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4104 <p>The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.</p> <p>The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4104 GHSA-qgvw-qc2q-gv5q — Django Tastypie Improper Deserialization of YAML Data https://cve.radiocsirt.org/vuln/ghsa-qgvw-qc2q-gv5q <p><strong>Affected:</strong> PyPI: django-tastypie</p> <p>The `from_yaml` method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.</p> <p><strong>Affected:</strong> PyPI: django-tastypie</p> <p>The `from_yaml` method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.</p> https://cve.radiocsirt.org/vuln/ghsa-qgvw-qc2q-gv5q gsd-2011-4104 https://cve.radiocsirt.org/vuln/gsd-2011-4104 gsd-2011-4104 https://cve.radiocsirt.org/vuln/gsd-2011-4104 PYSEC-2014-25 https://cve.radiocsirt.org/vuln/pysec-2014-25 <p><strong>Affected:</strong> PyPI: django-tastypie</p> <p>The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.</p> <p><strong>Affected:</strong> PyPI: django-tastypie</p> <p>The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.</p> https://cve.radiocsirt.org/vuln/pysec-2014-25