← Back

Owlmixin Project

owlmixin_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Owlmixin
owlmixin
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-16618
1Owlmixin Project
1Owlmixin
May 13, 2026
Nov 8, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file (aka load_yaml or load_yamlf) can execute arbitrary Python commands resulting in...Show more
An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file (aka load_yaml or load_yamlf) can execute arbitrary Python commands resulting in command execution because load is used where safe_load should have been used. An attacker can insert Python into loaded YAML to trigger this vulnerability.Show less