There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution.
References
https://nvd.nist.gov/vuln/detail/CVE-2018-2032…
これからの子どもたちにとってパソコンやスマートフォンは、私たち以上に“使えて当たり前”のデバイスです…
ymlref allows code injection.
References
https://nvd.nist.gov/vuln/detail/CVE-2018-20133
https://github.com/dexter2206/ymlref/issues/2
https://github.com/advisories/GHSA-8r8j-xvfj-36f9
helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.
References
https://nvd.nist.gov/vuln/detail/CVE-2018-16516
https://github.com/flask-admin/flask-admin/pull/1699
https://github.com/advisories/GHSA-894g-6j7q-2hx6
https://lists.fedora…
urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unint…
