High severity7.2NVD Advisory· Published Jul 11, 2019· Updated Jun 17, 2026
CVE-2019-10135
CVE-2019-10135
Description
A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:osbs-client_project:osbs-client:*:*:*:*:*:*:*:*Range: >=0.46,<0.56.1
- Range: <0.56.1
- Range: since 0.46 before 0.56.1
Patches
Vulnerability mechanics
References
2- github.com/containerbuildsystem/osbs-client/pull/865nvdPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.