django-tastypie@0.9.10 vulnerabilities

A flexible & capable API layer for Django.

Direct Vulnerabilities

Known vulnerabilities in the django-tastypie package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary Code Execution

django-tastypie is a flexible & capable API layer for Django. The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

[,0.9.10]