Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 22:16:45 +0000 cnvd-2020-21097 https://cve.radiocsirt.org/vuln/cnvd-2020-21097 cnvd-2020-21097 https://cve.radiocsirt.org/vuln/cnvd-2020-21097 EUVD-2026-35753 https://cve.radiocsirt.org/vuln/euvd-2026-35753 EUVD-2026-35753 https://cve.radiocsirt.org/vuln/euvd-2026-35753 fkie_cve-2020-1947 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1947 <p>In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere&#39;s web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.</p> <p>In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere&#39;s web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1947 GHSA-v54f-xcmp-43cr — Deserialization of Untrusted Data in Apache ShardingSphere https://cve.radiocsirt.org/vuln/ghsa-v54f-xcmp-43cr <p><strong>Affected:</strong> Maven: org.apache.shardingsphere:shardingsphere</p> <p>In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere&amp;#39;s web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.</p> <p><strong>Affected:</strong> Maven: org.apache.shardingsphere:shardingsphere</p> <p>In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere&amp;#39;s web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.</p> https://cve.radiocsirt.org/vuln/ghsa-v54f-xcmp-43cr gsd-2020-1947 https://cve.radiocsirt.org/vuln/gsd-2020-1947 gsd-2020-1947 https://cve.radiocsirt.org/vuln/gsd-2020-1947