Known vulnerabilities in PyYAML
Vendor:
The YAML Project
Software:
PyYAML
Software CPE:
cpe:2.3:a:the_yaml_project:pyyaml:*:*:*:*:*:python:*:*
Website:
https://yaml.org/
Total vulnerabilities:
4
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU54520 - Improper input validation CVE-2020-14343 |
CWE-20 | High | 5.4 | 04.07.2021 |
SB2021070403 SB2021070404 SB2022042259 and 17 more |
||
| #VU25823 - Improper input validation CVE-2020-1747 |
CWE-20 | High | 5.3.1 | 09.03.2020 |
SB2020030903 SB2020041201 SB2020051129 and 21 more |
||
| #VU25542 - Improper Access Control CVE-2019-20477 |
CWE-284 | High | 5.2 | 24.02.2020 |
SB2020022409 SB2020110514 SB20220615144 and 2 more |
||
| #VU21781 - Improper input validation CVE-2017-18342 |
CWE-20 | High | 4.1 | 15.10.2019 |
SB2018062716 SB2020031928 SB2023080233 and 6 more |