https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:05:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245038 EUVD-2026-245038 https://cve.radiocsirt.org/vuln/euvd-2026-245038 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39780 <p>A YAML deserialization vulnerability was found in the Robot Operating System (ROS) &#39;dynparam&#39;, a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() function in the &#39;set&#39; and &#39;get&#39; verbs, and allows for the creation of arbitrary Python objects. Through this flaw, a local or remote user can craft and execute arbitrary Python code.</p> <p>A YAML deserialization vulnerability was found in the Robot Operating System (ROS) &#39;dynparam&#39;, a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() function in the &#39;set&#39; and &#39;get&#39; verbs, and allows for the creation of arbitrary Python objects. Through this flaw, a local or remote user can craft and execute arbitrary Python code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39780 https://cve.radiocsirt.org/vuln/ghsa-92fv-mr4v-6fw4 <p>A YAML deserialization vulnerability was found in the Robot Operating System (ROS) &#39;dynparam&#39;, a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() function in the &#39;set&#39; and &#39;get&#39; verbs, and allows for the creation of arbitrary Python objects. Through this flaw, a local or remote user can craft and execute arbitrary Python code. This issue has now been fixed for ROS Noetic via commit 3d93ac13603438323d7e9fa74e879e45c5fe2e8e.</p> <p>A YAML deserialization vulnerability was found in the Robot Operating System (ROS) &#39;dynparam&#39;, a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() function in the &#39;set&#39; and &#39;get&#39; verbs, and allows for the creation of arbitrary Python objects. Through this flaw, a local or remote user can craft and execute arbitrary Python code. This issue has now been fixed for ROS Noetic via commit 3d93ac13603438323d7e9fa74e879e45c5fe2e8e.</p> https://cve.radiocsirt.org/vuln/ghsa-92fv-mr4v-6fw4 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-39780 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ros-dynamic-reconfigure, Ubuntu:18.04:LTS: ros-dynamic-reconfigure, Ubuntu:20.04:LTS: ros-dynamic-reconfigure, Ubuntu:22.04:LTS: ros-dynamic-reconfigure</p> <p>A YAML deserialization vulnerability was found in the Robot Operating System (ROS) &#39;dynparam&#39;, a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() function in the &#39;set&#39; and &#39;get&#39; verbs, and allows for the creation of arbitrary Python objects. Through this flaw, a local or remote user can craft and execute arbitrary Python code.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ros-dynamic-reconfigure, Ubuntu:18.04:LTS: ros-dynamic-reconfigure, Ubuntu:20.04:LTS: ros-dynamic-reconfigure, Ubuntu:22.04:LTS: ros-dynamic-reconfigure</p> <p>A YAML deserialization vulnerability was found in the Robot Operating System (ROS) &#39;dynparam&#39;, a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() function in the &#39;set&#39; and &#39;get&#39; verbs, and allows for the creation of arbitrary Python objects. Through this flaw, a local or remote user can craft and execute arbitrary Python code.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-39780