https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:40:58 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-04407 cnvd-2016-04407 https://cve.radiocsirt.org/vuln/cnvd-2016-04407 https://cve.radiocsirt.org/vuln/euvd-2026-84870 EUVD-2026-84870 https://cve.radiocsirt.org/vuln/euvd-2026-84870 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4972 <p>OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.</p> <p>OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4972 https://cve.radiocsirt.org/vuln/ghsa-87r7-q54j-f9qg <p><strong>Affected:</strong> PyPI: murano, PyPI: murano-dashboard, PyPI: python-muranoclient</p> <p>OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.</p> <p><strong>Affected:</strong> PyPI: murano, PyPI: murano-dashboard, PyPI: python-muranoclient</p> <p>OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.</p> https://cve.radiocsirt.org/vuln/ghsa-87r7-q54j-f9qg https://cve.radiocsirt.org/vuln/gsd-2016-4972 gsd-2016-4972 https://cve.radiocsirt.org/vuln/gsd-2016-4972 https://cve.radiocsirt.org/vuln/pysec-2016-22 <p><strong>Affected:</strong> PyPI: python-muranoclient</p> <p>OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.</p> <p><strong>Affected:</strong> PyPI: python-muranoclient</p> <p>OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.</p> https://cve.radiocsirt.org/vuln/pysec-2016-22 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4972 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: murano, Ubuntu:16.04:LTS: murano-dashboard, Ubuntu:16.04:LTS: python-muranoclient</p> <p>OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: murano, Ubuntu:16.04:LTS: murano-dashboard, Ubuntu:16.04:LTS: python-muranoclient</p> <p>OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4972