ruamel.yaml project records
1 published records for vendor ruamel.yaml project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
1 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2019-20478No exploit | In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument.ruamel.yaml project · ruamel.yaml | Critical9.8 | — | 6.8% | Feb 19, 2020 |
- CVE-2019-2047841Plan
In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument.
CriticalCVSS 9.8No exploitEPSS 6%ruamel.yaml project · ruamel.yamlFeb 19, 2020