Lucene search
GoogleOSV:CVE-2019-10135HistoryJul 11, 2019 - 7:15 p.m.
CVE-2019-10135
2019-07-1119:15:12
Google
osv.dev
3
A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| osbs-client | eq | 0.48 | |
| osbs-client | eq | 0.51 | |
| osbs-client | eq | 0.46 | |
| osbs-client | eq | 0.52 | |
| osbs-client | eq | 0.56 | |
| osbs-client | eq | 0.55 | |
| osbs-client | eq | 0.54 | |
| osbs-client | eq | 0.53 |
Related
cve
cve
CVE-2019-10135
2019-07-11 19:15:12
cvelist
cvelist
CVE-2019-10135
2019-07-11 00:00:00
nvd
nvd
CVE-2019-10135
2019-07-11 19:15:12
redhatcve
redhatcve
CVE-2019-10135
2019-06-20 05:52:01
prion
prion
Design/Logic Flaw
2019-07-11 19:15:00