PyYAML vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
6 matching records
- High7.8Hydra legacy target blacklist permits unsafe PyYAML loadingOpen the advisoryOct 27, 2026
- Unknown💀 Pyyaml — PoC exploit for CVE-2020-14343 by saina15 | SploitusCheck if you run itEPSS 6.24%Sep 22, 2026
- Critical9.8A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (veCheck if you run itEPSS 2.88%Aug 1, 2025
- Critical9.8A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML fil…Open the advisoryMar 24, 2020
- Critical9.8CVE-2019-20477 is listed by PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., P…Open the advisoryFeb 19, 2020
- Critical9.8In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data.Open the advisoryJun 27, 2018
Sort
6 records