Summary

Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.

Affected products

Does this affect you?

Add your gear to cvedb and we'll alert you only when sqla_yaml_fixtures_project ships something exploited.

References

• NVD entry
• CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.