high7.8
CVE-2019-3575
sqla-yaml-fixtures is vulnerable to Code Injection
Impact
Sqla_yaml_fixtures versions up to 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in `sqla_yaml_fixtures.load`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | sqla-yaml-fixtures | <= 0.9.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sqla Yaml Fixtures Project | Sqla Yaml Fixtures | Version 0.9.1 |