Filtered by vendor Djangoproject Subscriptions
Filtered by product Tastypie Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2011-4104 1 Djangoproject 1 Tastypie 2024-08-07 N/A
The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.