Every CVE Search/ Get API key

CVE-2020-1747

Improper Input Validation in PyYAML

9.8 CriticalFix available

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

5.44%Up 1.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 9.8

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
CVE-2020-1747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2020-0160 9.8

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
EUVD-2020-0160
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-6757-jp84-gxfx 9.3

Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
GHSA-6757-jp84-gxfx
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
NVD 9.8

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
CVE-2020-1747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
OSVALPINE-CVE-2020-1747 9.8

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
ALPINE-CVE-2020-1747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-31783 9.8

CVE-2020-1747 affecting package PyYAML for versions less than 5.4.1-1

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
AZL-31783
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVBELL-CVE-2020-1747 9.8

CVE-2020-1747 does not affect BellSoft software

Record
BELL-CVE-2020-1747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
CVE-2020-1747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-1747 9.8

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
DEBIAN-CVE-2020-1747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-6757-jp84-gxfx 9.3

Improper Input Validation in PyYAML

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
GHSA-6757-jp84-gxfx
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVRHSA-2020:4641 9.8

Red Hat Security Advisory: python38:3.8 security, bug fix, and enhancement update

Record
RHSA-2020:4641
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2020:4641 9.8

Moderate: python38:3.8 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python38 (3.8.3). (BZ#1847416)

Security Fix(es):

  • PyYAML: command execution through python/object/apply constructor in FullLoader (CVE-2019-20477)

  • python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)

  • PyYAML: arbitrary command execution through python/object/new when FullLoader is used (CVE-2020-1747)

  • python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS (CVE-2020-8492)

  • python: DoS via inefficiency in IPv{4,6}Interface classes (CVE-2020-14422)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4641
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-1747 9.8

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
UBUNTU-CVE-2020-1747
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2020:4641 No score

Moderate: python38:3.8 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python38 (3.8.3). (BZ#1847416)

Security Fix(es):

  • PyYAML: command execution through python/object/apply constructor in FullLoader (CVE-2019-20477)

  • python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)

  • PyYAML: arbitrary command execution through python/object/new when FullLoader is used (CVE-2020-1747)

  • python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS (CVE-2020-8492)

  • python: DoS via inefficiency in IPv{4,6}Interface classes (CVE-2020-14422)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:4641
Updated
2026-11-02
OSVALSA-2021:2583 No score

Moderate: python38:3.8 and python38-devel:3.8 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • PyYAML: incomplete fix for CVE-2020-1747 (CVE-2020-14343)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2021:2583
Updated
2026-11-02
OSVMGASA-2020-0155 No score

Updated python-yaml packages fix security vulnerability

Updated python-yaml packages fix security vulnerability:

A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor (CVE-2020-1747).

Record
MGASA-2020-0155
Updated
2026-11-02
OSVopenSUSE-SU-2020:0507-1 No score

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues:

  • CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2020:0507-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:0630-1 No score

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues:

  • CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2020:0630-1
Updated
2026-11-02
OSVPYSEC-2020-96 No score

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Record
PYSEC-2020-96
Updated
2026-11-02
OSVSUSE-FU-2022:0444-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Track already fixed issues.
Record
SUSE-FU-2022:0444-1
Updated
2026-11-02
OSVSUSE-FU-2022:0445-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Mention fixed issues provided with the bundle.
Record
SUSE-FU-2022:0445-1
Updated
2026-11-02
OSVSUSE-SU-2020:0959-1 No score

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues:

  • CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).
Record
SUSE-SU-2020:0959-1
Updated
2026-11-02
OSVSUSE-SU-2020:1285-1 No score

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues:

  • CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).
Record
SUSE-SU-2020:1285-1
Updated
2026-11-02
OSVSUSE-SU-2022:2841-1 No score

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues:

  • CVE-2020-1747: Fixed an arbitrary code execution issue when parsing an untrusted YAML file with the default loader (bsc#1165439).
  • CVE-2020-14343: Completed the fix for CVE-2020-1747 (bsc#1174514).
Record
SUSE-SU-2022:2841-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pyyaml
PyPI
 5.1b7 up to 5.3.1
5.3.1
py3-yaml
Alpine:v3.11
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.12
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.13
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.14
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.15
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.16
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.17
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.18
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.19
 before 5.3.1-r0
5.3.1-r0
Show 214 moreShow less
Affected packages
PackageAffectedFixed
py3-yaml
Alpine:v3.20
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.21
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.22
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.23
 before 5.3.1-r0
5.3.1-r0
py3-yaml
Alpine:v3.24
 before 5.3.1-r0
5.3.1-r0
python38-Cython
AlmaLinux:8
From an advisory covering 5 CVEs
 before 0.29.14-4.module_el8.6.0+2778+cd494b30
0.29.14-4.module_el8.6.0+2778+cd494b30
python38-asn1crypto
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.2.0-3.module_el8.6.0+2778+cd494b30
1.2.0-3.module_el8.6.0+2778+cd494b30
python38-cffi
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.13.2-3.module_el8.6.0+2778+cd494b30
1.13.2-3.module_el8.6.0+2778+cd494b30
python38-chardet
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3.0.4-19.module_el8.6.0+2778+cd494b30
3.0.4-19.module_el8.6.0+2778+cd494b30
python38-cryptography
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.8-3.module_el8.6.0+2778+cd494b30
2.8-3.module_el8.6.0+2778+cd494b30
python38-idna
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.8-6.module_el8.6.0+2778+cd494b30
2.8-6.module_el8.6.0+2778+cd494b30
python38-markupsafe
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.1.1-6.module_el8.6.0+2778+cd494b30
1.1.1-6.module_el8.6.0+2778+cd494b30
python38-mod_wsgi
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.6.8-3.module_el8.6.0+2778+cd494b30
4.6.8-3.module_el8.6.0+2778+cd494b30
python38-psycopg2
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.8.4-4.module_el8.6.0+2778+cd494b30
2.8.4-4.module_el8.6.0+2778+cd494b30
python38-psycopg2-doc
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.8.4-4.module_el8.6.0+2778+cd494b30
2.8.4-4.module_el8.6.0+2778+cd494b30
python38-psycopg2-tests
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.8.4-4.module_el8.6.0+2778+cd494b30
2.8.4-4.module_el8.6.0+2778+cd494b30
python38-pycparser
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.19-3.module_el8.6.0+2778+cd494b30
2.19-3.module_el8.6.0+2778+cd494b30
python38-pysocks
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.7.1-4.module_el8.6.0+2778+cd494b30
1.7.1-4.module_el8.6.0+2778+cd494b30
python38-pytz
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2019.3-3.module_el8.6.0+2778+cd494b30
2019.3-3.module_el8.6.0+2778+cd494b30
python38-requests
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2.22.0-9.module_el8.6.0+2778+cd494b30
2.22.0-9.module_el8.6.0+2778+cd494b30
python38-scipy
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.3.1-4.module_el8.6.0+2778+cd494b30
1.3.1-4.module_el8.6.0+2778+cd494b30
python38-Cython
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.29.14-4.module_el8.6.0+2778+cd494b30
0.29.14-4.module_el8.6.0+2778+cd494b30
python38-PyMySQL
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.10.1-1.module_el8.6.0+2778+cd494b30
0.10.1-1.module_el8.6.0+2778+cd494b30
python38-asn1crypto
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.2.0-3.module_el8.6.0+2778+cd494b30
1.2.0-3.module_el8.6.0+2778+cd494b30
python38-atomicwrites
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.3.0-8.module_el8.6.0+2778+cd494b30
1.3.0-8.module_el8.6.0+2778+cd494b30
python38-atomicwrites
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.3.0-8.module_el8.4.0+2510+cb4d423d
1.3.0-8.module_el8.4.0+2510+cb4d423d
python38-attrs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 19.3.0-3.module_el8.6.0+2778+cd494b30
19.3.0-3.module_el8.6.0+2778+cd494b30
python38-attrs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 19.3.0-3.module_el8.4.0+2510+cb4d423d
19.3.0-3.module_el8.4.0+2510+cb4d423d
python38-cffi
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.13.2-3.module_el8.6.0+2778+cd494b30
1.13.2-3.module_el8.6.0+2778+cd494b30
python38-chardet
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.0.4-19.module_el8.6.0+2778+cd494b30
3.0.4-19.module_el8.6.0+2778+cd494b30
python38-cryptography
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.8-3.module_el8.6.0+2778+cd494b30
2.8-3.module_el8.6.0+2778+cd494b30
python38-idna
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.8-6.module_el8.6.0+2778+cd494b30
2.8-6.module_el8.6.0+2778+cd494b30
python38-markupsafe
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.1.1-6.module_el8.6.0+2778+cd494b30
1.1.1-6.module_el8.6.0+2778+cd494b30
python38-mod_wsgi
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.6.8-3.module_el8.6.0+2778+cd494b30
4.6.8-3.module_el8.6.0+2778+cd494b30
python38-more-itertools
AlmaLinux:8
From an advisory covering 2 CVEs
 before 7.2.0-5.module_el8.4.0+2510+cb4d423d
7.2.0-5.module_el8.4.0+2510+cb4d423d
python38-more-itertools
AlmaLinux:8
From an advisory covering 2 CVEs
 before 7.2.0-5.module_el8.6.0+2778+cd494b30
7.2.0-5.module_el8.6.0+2778+cd494b30
python38-packaging
AlmaLinux:8
From an advisory covering 2 CVEs
 before 19.2-3.module_el8.6.0+2778+cd494b30
19.2-3.module_el8.6.0+2778+cd494b30
python38-packaging
AlmaLinux:8
From an advisory covering 2 CVEs
 before 19.2-3.module_el8.4.0+2510+cb4d423d
19.2-3.module_el8.4.0+2510+cb4d423d
python38-pluggy
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.13.0-3.module_el8.4.0+2510+cb4d423d
0.13.0-3.module_el8.4.0+2510+cb4d423d
python38-pluggy
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.13.0-3.module_el8.6.0+2778+cd494b30
0.13.0-3.module_el8.6.0+2778+cd494b30
python38-ply
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.11-10.module_el8.6.0+2778+cd494b30
3.11-10.module_el8.6.0+2778+cd494b30
python38-psycopg2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.8.4-4.module_el8.6.0+2778+cd494b30
2.8.4-4.module_el8.6.0+2778+cd494b30
python38-psycopg2-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.8.4-4.module_el8.6.0+2778+cd494b30
2.8.4-4.module_el8.6.0+2778+cd494b30
python38-psycopg2-tests
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.8.4-4.module_el8.6.0+2778+cd494b30
2.8.4-4.module_el8.6.0+2778+cd494b30
python38-py
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.8.0-8.module_el8.4.0+2510+cb4d423d
1.8.0-8.module_el8.4.0+2510+cb4d423d
python38-py
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.8.0-8.module_el8.6.0+2778+cd494b30
1.8.0-8.module_el8.6.0+2778+cd494b30
python38-pycparser
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.19-3.module_el8.6.0+2778+cd494b30
2.19-3.module_el8.6.0+2778+cd494b30
python38-pyparsing
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.5-3.module_el8.4.0+2510+cb4d423d
2.4.5-3.module_el8.4.0+2510+cb4d423d
python38-pyparsing
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.5-3.module_el8.6.0+2778+cd494b30
2.4.5-3.module_el8.6.0+2778+cd494b30
python38-pysocks
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.7.1-4.module_el8.6.0+2778+cd494b30
1.7.1-4.module_el8.6.0+2778+cd494b30
python38-pytest
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.6.6-3.module_el8.6.0+2778+cd494b30
4.6.6-3.module_el8.6.0+2778+cd494b30
python38-pytest
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.6.6-3.module_el8.4.0+2510+cb4d423d
4.6.6-3.module_el8.4.0+2510+cb4d423d
python38-pytz
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2019.3-3.module_el8.6.0+2778+cd494b30
2019.3-3.module_el8.6.0+2778+cd494b30
python38-pyyaml
AlmaLinux:8
From an advisory covering 2 CVEs
 before 5.4.1-1.module_el8.6.0+2778+cd494b30
5.4.1-1.module_el8.6.0+2778+cd494b30
python38-requests
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.22.0-9.module_el8.6.0+2778+cd494b30
2.22.0-9.module_el8.6.0+2778+cd494b30
python38-scipy
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.3.1-4.module_el8.6.0+2778+cd494b30
1.3.1-4.module_el8.6.0+2778+cd494b30
python38-six
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.12.0-10.module_el8.6.0+2778+cd494b30
1.12.0-10.module_el8.6.0+2778+cd494b30
python38-wcwidth
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.1.7-16.module_el8.6.0+2778+cd494b30
0.1.7-16.module_el8.6.0+2778+cd494b30
python38-wcwidth
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.1.7-16.module_el8.4.0+2510+cb4d423d
0.1.7-16.module_el8.4.0+2510+cb4d423d
PyYAML
Azure Linux:2
 before 5.4.1-1
5.4.1-1
pyyaml
Debian:12
 before 5.3-2
5.3-2
pyyaml
Debian:13
 before 5.3-2
5.3-2
pyyaml
Debian:14
 before 5.3-2
5.3-2
pyyaml
PyPI
 5.1b7 up to 5.3.1, plus listed versions
5.15.1.15.1.25.25.2b15.35.3b1
5.3.1
python-yaml
Mageia:7
 before 5.3.1-1.mga7
5.3.1-1.mga7
pyyaml
PyPI
 5.1 up to 5.3.1, plus listed versions
5.1.15.1.25.2b15.25.3b15.3
5.3.1
Cython
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.29.14-4.module+el8.2.0+5234+f98739b6
0:0.29.14-4.module+el8.2.0+5234+f98739b6
Cython-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.29.14-4.module+el8.2.0+5234+f98739b6
0:0.29.14-4.module+el8.2.0+5234+f98739b6
PyYAML
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.3.1-1.module+el8.3.0+7187+a27ec44b
0:5.3.1-1.module+el8.3.0+7187+a27ec44b
PyYAML-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.3.1-1.module+el8.3.0+7187+a27ec44b
0:5.3.1-1.module+el8.3.0+7187+a27ec44b
babel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.7.0-10.module+el8.2.0+5234+f98739b6
0:2.7.0-10.module+el8.2.0+5234+f98739b6
mod_wsgi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.6.8-3.module+el8.2.0+5234+f98739b6
0:4.6.8-3.module+el8.2.0+5234+f98739b6
numpy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.17.3-5.module+el8.3.0+7187+a27ec44b
0:1.17.3-5.module+el8.3.0+7187+a27ec44b
numpy-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.17.3-5.module+el8.3.0+7187+a27ec44b
0:1.17.3-5.module+el8.3.0+7187+a27ec44b
python-PyMySQL
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.9.3-3.module+el8.2.0+5234+f98739b6
0:0.9.3-3.module+el8.2.0+5234+f98739b6
python-asn1crypto
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.2.0-3.module+el8.2.0+5234+f98739b6
0:1.2.0-3.module+el8.2.0+5234+f98739b6
python-cffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.13.2-3.module+el8.2.0+5234+f98739b6
0:1.13.2-3.module+el8.2.0+5234+f98739b6
python-cffi-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.13.2-3.module+el8.2.0+5234+f98739b6
0:1.13.2-3.module+el8.2.0+5234+f98739b6
python-chardet
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.0.4-19.module+el8.2.0+5234+f98739b6
0:3.0.4-19.module+el8.2.0+5234+f98739b6
python-cryptography
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8-3.module+el8.2.0+5234+f98739b6
0:2.8-3.module+el8.2.0+5234+f98739b6
python-cryptography-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8-3.module+el8.2.0+5234+f98739b6
0:2.8-3.module+el8.2.0+5234+f98739b6
python-idna
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8-6.module+el8.2.0+5234+f98739b6
0:2.8-6.module+el8.2.0+5234+f98739b6
python-jinja2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.10.3-4.module+el8.2.0+5234+f98739b6
0:2.10.3-4.module+el8.2.0+5234+f98739b6
python-lxml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.4.1-4.module+el8.2.0+5234+f98739b6
0:4.4.1-4.module+el8.2.0+5234+f98739b6
python-lxml-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.4.1-4.module+el8.2.0+5234+f98739b6
0:4.4.1-4.module+el8.2.0+5234+f98739b6
python-markupsafe
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.1.1-6.module+el8.2.0+5234+f98739b6
0:1.1.1-6.module+el8.2.0+5234+f98739b6
python-markupsafe-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.1.1-6.module+el8.2.0+5234+f98739b6
0:1.1.1-6.module+el8.2.0+5234+f98739b6
python-ply
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.11-8.module+el8.2.0+5234+f98739b6
0:3.11-8.module+el8.2.0+5234+f98739b6
python-psutil
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.6.4-3.module+el8.2.0+5234+f98739b6
0:5.6.4-3.module+el8.2.0+5234+f98739b6
python-psutil-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.6.4-3.module+el8.2.0+5234+f98739b6
0:5.6.4-3.module+el8.2.0+5234+f98739b6
python-psycopg2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8.4-4.module+el8.2.0+5234+f98739b6
0:2.8.4-4.module+el8.2.0+5234+f98739b6
python-psycopg2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8.4-4.module+el8.2.0+5234+f98739b6
0:2.8.4-4.module+el8.2.0+5234+f98739b6
python-pycparser
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.19-3.module+el8.2.0+5234+f98739b6
0:2.19-3.module+el8.2.0+5234+f98739b6
python-pysocks
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.7.1-4.module+el8.2.0+5234+f98739b6
0:1.7.1-4.module+el8.2.0+5234+f98739b6
python-requests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.22.0-9.module+el8.2.0+5234+f98739b6
0:2.22.0-9.module+el8.2.0+5234+f98739b6
python-six
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.12.0-9.module+el8.2.0+5234+f98739b6
0:1.12.0-9.module+el8.2.0+5234+f98739b6
python-urllib3
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.25.7-4.module+el8.2.0+5234+f98739b6
0:1.25.7-4.module+el8.2.0+5234+f98739b6
python-wheel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.33.6-5.module+el8.3.0+7187+a27ec44b
0:0.33.6-5.module+el8.3.0+7187+a27ec44b
python38
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-Cython
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.29.14-4.module+el8.2.0+5234+f98739b6
0:0.29.14-4.module+el8.2.0+5234+f98739b6
python38-Cython-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.29.14-4.module+el8.2.0+5234+f98739b6
0:0.29.14-4.module+el8.2.0+5234+f98739b6
python38-PyMySQL
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.9.3-3.module+el8.2.0+5234+f98739b6
0:0.9.3-3.module+el8.2.0+5234+f98739b6
python38-asn1crypto
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.2.0-3.module+el8.2.0+5234+f98739b6
0:1.2.0-3.module+el8.2.0+5234+f98739b6
python38-babel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.7.0-10.module+el8.2.0+5234+f98739b6
0:2.7.0-10.module+el8.2.0+5234+f98739b6
python38-cffi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.13.2-3.module+el8.2.0+5234+f98739b6
0:1.13.2-3.module+el8.2.0+5234+f98739b6
python38-cffi-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.13.2-3.module+el8.2.0+5234+f98739b6
0:1.13.2-3.module+el8.2.0+5234+f98739b6
python38-chardet
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.0.4-19.module+el8.2.0+5234+f98739b6
0:3.0.4-19.module+el8.2.0+5234+f98739b6
python38-cryptography
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8-3.module+el8.2.0+5234+f98739b6
0:2.8-3.module+el8.2.0+5234+f98739b6
python38-cryptography-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8-3.module+el8.2.0+5234+f98739b6
0:2.8-3.module+el8.2.0+5234+f98739b6
python38-debug
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-idle
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-idna
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8-6.module+el8.2.0+5234+f98739b6
0:2.8-6.module+el8.2.0+5234+f98739b6
python38-jinja2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.10.3-4.module+el8.2.0+5234+f98739b6
0:2.10.3-4.module+el8.2.0+5234+f98739b6
python38-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-lxml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.4.1-4.module+el8.2.0+5234+f98739b6
0:4.4.1-4.module+el8.2.0+5234+f98739b6
python38-lxml-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.4.1-4.module+el8.2.0+5234+f98739b6
0:4.4.1-4.module+el8.2.0+5234+f98739b6
python38-markupsafe
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.1.1-6.module+el8.2.0+5234+f98739b6
0:1.1.1-6.module+el8.2.0+5234+f98739b6
python38-markupsafe-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.1.1-6.module+el8.2.0+5234+f98739b6
0:1.1.1-6.module+el8.2.0+5234+f98739b6
python38-mod_wsgi
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.6.8-3.module+el8.2.0+5234+f98739b6
0:4.6.8-3.module+el8.2.0+5234+f98739b6
python38-numpy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.17.3-5.module+el8.3.0+7187+a27ec44b
0:1.17.3-5.module+el8.3.0+7187+a27ec44b
python38-numpy-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.17.3-5.module+el8.3.0+7187+a27ec44b
0:1.17.3-5.module+el8.3.0+7187+a27ec44b
python38-numpy-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.17.3-5.module+el8.3.0+7187+a27ec44b
0:1.17.3-5.module+el8.3.0+7187+a27ec44b
python38-numpy-f2py
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.17.3-5.module+el8.3.0+7187+a27ec44b
0:1.17.3-5.module+el8.3.0+7187+a27ec44b
python38-pip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:19.3.1-1.module+el8.3.0+7187+a27ec44b
0:19.3.1-1.module+el8.3.0+7187+a27ec44b
python38-pip-wheel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:19.3.1-1.module+el8.3.0+7187+a27ec44b
0:19.3.1-1.module+el8.3.0+7187+a27ec44b
python38-ply
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.11-8.module+el8.2.0+5234+f98739b6
0:3.11-8.module+el8.2.0+5234+f98739b6
python38-psutil
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.6.4-3.module+el8.2.0+5234+f98739b6
0:5.6.4-3.module+el8.2.0+5234+f98739b6
python38-psutil-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.6.4-3.module+el8.2.0+5234+f98739b6
0:5.6.4-3.module+el8.2.0+5234+f98739b6
python38-psycopg2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8.4-4.module+el8.2.0+5234+f98739b6
0:2.8.4-4.module+el8.2.0+5234+f98739b6
python38-psycopg2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8.4-4.module+el8.2.0+5234+f98739b6
0:2.8.4-4.module+el8.2.0+5234+f98739b6
python38-psycopg2-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8.4-4.module+el8.2.0+5234+f98739b6
0:2.8.4-4.module+el8.2.0+5234+f98739b6
python38-psycopg2-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.8.4-4.module+el8.2.0+5234+f98739b6
0:2.8.4-4.module+el8.2.0+5234+f98739b6
python38-pycparser
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.19-3.module+el8.2.0+5234+f98739b6
0:2.19-3.module+el8.2.0+5234+f98739b6
python38-pysocks
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.7.1-4.module+el8.2.0+5234+f98739b6
0:1.7.1-4.module+el8.2.0+5234+f98739b6
python38-pytz
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2019.3-3.module+el8.2.0+5234+f98739b6
0:2019.3-3.module+el8.2.0+5234+f98739b6
python38-pyyaml
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.3.1-1.module+el8.3.0+7187+a27ec44b
0:5.3.1-1.module+el8.3.0+7187+a27ec44b
python38-pyyaml-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:5.3.1-1.module+el8.3.0+7187+a27ec44b
0:5.3.1-1.module+el8.3.0+7187+a27ec44b
python38-requests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2.22.0-9.module+el8.2.0+5234+f98739b6
0:2.22.0-9.module+el8.2.0+5234+f98739b6
python38-rpm-macros
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-scipy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.3.1-4.module+el8.2.0+5234+f98739b6
0:1.3.1-4.module+el8.2.0+5234+f98739b6
python38-scipy-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.3.1-4.module+el8.2.0+5234+f98739b6
0:1.3.1-4.module+el8.2.0+5234+f98739b6
python38-setuptools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:41.6.0-4.module+el8.3.0+7187+a27ec44b
0:41.6.0-4.module+el8.3.0+7187+a27ec44b
python38-setuptools-wheel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:41.6.0-4.module+el8.3.0+7187+a27ec44b
0:41.6.0-4.module+el8.3.0+7187+a27ec44b
python38-six
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.12.0-9.module+el8.2.0+5234+f98739b6
0:1.12.0-9.module+el8.2.0+5234+f98739b6
python38-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-tkinter
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:3.8.3-3.module+el8.3.0+7680+79e7e61a
0:3.8.3-3.module+el8.3.0+7680+79e7e61a
python38-urllib3
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.25.7-4.module+el8.2.0+5234+f98739b6
0:1.25.7-4.module+el8.2.0+5234+f98739b6
python38-wheel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.33.6-5.module+el8.3.0+7187+a27ec44b
0:0.33.6-5.module+el8.3.0+7187+a27ec44b
python38-wheel-wheel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.33.6-5.module+el8.3.0+7187+a27ec44b
0:0.33.6-5.module+el8.3.0+7187+a27ec44b
python3x-pip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:19.3.1-1.module+el8.3.0+7187+a27ec44b
0:19.3.1-1.module+el8.3.0+7187+a27ec44b
python3x-setuptools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:41.6.0-4.module+el8.3.0+7187+a27ec44b
0:41.6.0-4.module+el8.3.0+7187+a27ec44b
pytz
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:2019.3-3.module+el8.2.0+5234+f98739b6
0:2019.3-3.module+el8.2.0+5234+f98739b6
scipy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.3.1-4.module+el8.2.0+5234+f98739b6
0:1.3.1-4.module+el8.2.0+5234+f98739b6
scipy-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:1.3.1-4.module+el8.2.0+5234+f98739b6
0:1.3.1-4.module+el8.2.0+5234+f98739b6
babel
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.7.0-10.module+el8.4.0+570+c2eaf144
0:2.7.0-10.module+el8.4.0+570+c2eaf144
Cython
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:0.29.14-4.module+el8.4.0+570+c2eaf144
0:0.29.14-4.module+el8.4.0+570+c2eaf144
mod_wsgi
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:4.6.8-3.module+el8.4.0+570+c2eaf144
0:4.6.8-3.module+el8.4.0+570+c2eaf144
numpy
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.17.3-5.module+el8.4.0+570+c2eaf144
0:1.17.3-5.module+el8.4.0+570+c2eaf144
python3x-pip
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:19.3.1-1.module+el8.4.0+570+c2eaf144
0:19.3.1-1.module+el8.4.0+570+c2eaf144
python3x-setuptools
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:41.6.0-4.module+el8.4.0+570+c2eaf144
0:41.6.0-4.module+el8.4.0+570+c2eaf144
python-asn1crypto
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.2.0-3.module+el8.4.0+570+c2eaf144
0:1.2.0-3.module+el8.4.0+570+c2eaf144
python-cffi
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.13.2-3.module+el8.4.0+570+c2eaf144
0:1.13.2-3.module+el8.4.0+570+c2eaf144
python-chardet
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:3.0.4-19.module+el8.4.0+570+c2eaf144
0:3.0.4-19.module+el8.4.0+570+c2eaf144
python-cryptography
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.8-3.module+el8.5.0+672+ab6eb015
0:2.8-3.module+el8.5.0+672+ab6eb015
python-cryptography
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.8-3.module+el8.4.0+570+c2eaf144
0:2.8-3.module+el8.4.0+570+c2eaf144
python-idna
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.8-6.module+el8.4.0+570+c2eaf144
0:2.8-6.module+el8.4.0+570+c2eaf144
python-jinja2
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.10.3-4.module+el8.4.0+570+c2eaf144
0:2.10.3-4.module+el8.4.0+570+c2eaf144
python-markupsafe
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.1.1-6.module+el8.4.0+570+c2eaf144
0:1.1.1-6.module+el8.4.0+570+c2eaf144
python-psutil
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:5.6.4-3.module+el8.4.0+570+c2eaf144
0:5.6.4-3.module+el8.4.0+570+c2eaf144
python-psycopg2
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.8.4-4.module+el8.6.0+794+eba84017
0:2.8.4-4.module+el8.6.0+794+eba84017
python-psycopg2
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.8.4-4.module+el8.4.0+570+c2eaf144
0:2.8.4-4.module+el8.4.0+570+c2eaf144
python-pycparser
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.19-3.module+el8.4.0+570+c2eaf144
0:2.19-3.module+el8.4.0+570+c2eaf144
python-pysocks
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.7.1-4.module+el8.4.0+570+c2eaf144
0:1.7.1-4.module+el8.4.0+570+c2eaf144
python-requests
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2.22.0-9.module+el8.4.0+570+c2eaf144
0:2.22.0-9.module+el8.4.0+570+c2eaf144
python-urllib3
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.25.7-4.module+el8.4.0+570+c2eaf144
0:1.25.7-4.module+el8.4.0+570+c2eaf144
python-wheel
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:0.33.6-5.module+el8.4.0+570+c2eaf144
0:0.33.6-5.module+el8.4.0+570+c2eaf144
pytz
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:2019.3-3.module+el8.4.0+570+c2eaf144
0:2019.3-3.module+el8.4.0+570+c2eaf144
PyYAML
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:5.3.1-1.module+el8.4.0+570+c2eaf144
0:5.3.1-1.module+el8.4.0+570+c2eaf144
scipy
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.3.1-4.module+el8.5.0+672+ab6eb015
0:1.3.1-4.module+el8.5.0+672+ab6eb015
scipy
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:1.3.1-4.module+el8.4.0+570+c2eaf144
0:1.3.1-4.module+el8.4.0+570+c2eaf144
python-PyYAML
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 5.1.2-6.6.1
5.1.2-6.6.1
python-PyYAML
SUSE:Linux Enterprise Module for Python 2 15 SP1
 before 5.1.2-6.6.1
5.1.2-6.6.1
python-PyYAML
SUSE:HPE Helion OpenStack 8
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:OpenStack Cloud 6-LTSS
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:OpenStack Cloud 7
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:OpenStack Cloud 8
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:OpenStack Cloud Crowbar 8
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise High Availability Extension 12 SP1
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise High Availability Extension 12 SP2
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Manager Client Tools 12
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Module for Advanced Systems Management 12
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Module for Containers 12
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Module for Public Cloud 12
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Point of Sale 12 SP2
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Server 12 SP4
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Server 12 SP5
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Manager Proxy 3.2
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Manager Server 3.2
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Enterprise Storage 5
 before 5.1.2-26.12.1
5.1.2-26.12.1
python-PyYAML
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 2 CVEs
 before 5.1.2-150000.3.6.1
5.1.2-150000.3.6.1
python-PyYAML
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 5.1.2-150000.3.6.1
5.1.2-150000.3.6.1
python-PyYAML
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 5.1.2-150000.3.6.1
5.1.2-150000.3.6.1
python-PyYAML
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
 before 5.1.2-150000.3.6.1
5.1.2-150000.3.6.1
python-PyYAML
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 5.1.2-150000.3.6.1
5.1.2-150000.3.6.1
python-PyYAML
openSUSE:Leap 15.1
 before 5.1.2-lp151.2.6.1
5.1.2-lp151.2.6.1
python-PyYAML
openSUSE:Leap 15.1
 before 5.1.2-lp151.2.13.1
5.1.2-lp151.2.13.1

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-1747 is a critical vulnerability (CVSS 9.8) in Pyyaml, published March 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.44%, the 92nd percentile. Fixed in pyyaml 5.3.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 542 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open