← Back

Tastypie

tastypie

Vendor: Djangoproject • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-4104
1Djangoproject
1Tastypie
May 6, 2026
Oct 27, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.