← Back

Piston

piston

Vendor: Djangoproject • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-4103
1Djangoproject
1Piston
May 6, 2026
Oct 27, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.