Mlalchemy Project

mlalchemy_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Mlalchemy

mlalchemy

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-16615 1Mlalchemy Project 1Mlalchemy May 13, 2026 Nov 8, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrar...Show more An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2017-16615

1Mlalchemy Project

1Mlalchemy

May 13, 2026

Nov 8, 2017

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.Show less