In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pyyaml | Jul 30, 2024 | Jun 27, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 5, 2024 |
| Freebsd | — | Upgrade py36-yamlUpgrade py35-yamlUpgrade py37-yamlUpgrade py27-yaml | Apr 25, 2019 | Apr 23, 2019 |
| Gentoo Linux | — | Upgrade dev-python/pyyaml. | Mar 20, 2020 | Jun 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2019 | Jun 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Feb 15, 2019 | Jun 27, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 15, 2019 | Jun 27, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-pyyamlUpgrade python2-pyyaml | Nov 28, 2019 | Jun 27, 2018 |
| Oracle Solaris | — | Upgrade library/python/pyyaml-35 to version 5.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/pyyaml-26 to version 3.9-11.4.0.0.1.9.0 on Solaris 11.4Upgrade legacy/library/python/pyyaml-34 to version 5.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/pyyaml-37 to version 5.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/pyyaml-27 to version 5.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade legacy/library/python/pyyaml-35 to version 5.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/pyyaml-34 to version 5.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python-2/pyyaml-26 to version 3.9-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python/pyyaml to version 5.1-11.4.11.0.1.3.0 on Solaris 11.4 | Jul 17, 2019 | Jun 27, 2018 |
| Oracle_linux | — | Upgrade ol-automation-manager-cliUpgrade ol-automation-managerUpgrade python3-olamkit | Apr 28, 2022 | Jun 27, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 27, 2018 |
| Suse | — | Upgrade python3-pyyaml | Feb 4, 2022 | Jun 5, 2007 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub