Code Injection Flaw Discovered In Yamale Python Package
Yamale the Python package that allows developers to validate YAML – a data serialization language often used for writing configuration files has been discovered to be having a high severity code injection vulnerability that could be trivially exploited by adversaries to execute arbitrary Python code. The flaw tracked as CVE-2021-38305 (CVSS score: 7.8) involves manipulating […]
Code Injection Flaw Discovered In Yamale Python Package Read More »