https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 05:32:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-170466 EUVD-2026-170466 https://cve.radiocsirt.org/vuln/euvd-2026-170466 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000210 <p>YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deserialize user-controlled types in the line &#34;currentType = Type.GetType(nodeEvent.Tag.Substring(1), throwOnError: false);&#34; and blindly instantiates them. that can result in Code execution in the context of the running process. This attack appear to be exploitable via Victim must parse a specially-crafted YAML file. This vulnerability appears to have been fixed in 5.0.0.</p> <p>YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deserialize user-controlled types in the line &#34;currentType = Type.GetType(nodeEvent.Tag.Substring(1), throwOnError: false);&#34; and blindly instantiates them. that can result in Code execution in the context of the running process. This attack appear to be exploitable via Victim must parse a specially-crafted YAML file. This vulnerability appears to have been fixed in 5.0.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000210 https://cve.radiocsirt.org/vuln/ghsa-rpch-cqj9-h65r <p><strong>Affected:</strong> NuGet: YamlDotNet, NuGet: YamlDotNet.Signed</p> <p>YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deserialize user-controlled types in the line &#34;currentType = Type.GetType(nodeEvent.Tag.Substring(1), throwOnError: false);&#34; and blindly instantiates them. that can result in Code execution in the context of the running process. This attack appear to be exploitable via Victim must parse a specially-crafted YAML file. This vulnerability appears to have been fixed in 5.0.0.</p> <p><strong>Affected:</strong> NuGet: YamlDotNet, NuGet: YamlDotNet.Signed</p> <p>YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deserialize user-controlled types in the line &#34;currentType = Type.GetType(nodeEvent.Tag.Substring(1), throwOnError: false);&#34; and blindly instantiates them. that can result in Code execution in the context of the running process. This attack appear to be exploitable via Victim must parse a specially-crafted YAML file. This vulnerability appears to have been fixed in 5.0.0.</p> https://cve.radiocsirt.org/vuln/ghsa-rpch-cqj9-h65r https://cve.radiocsirt.org/vuln/gsd-2018-1000210 gsd-2018-1000210 https://cve.radiocsirt.org/vuln/gsd-2018-1000210