Vulnerabilities for PyYAML

First version without a known vulnerability: 5.4

Details

• GHSA-3pqx-4fqf-j49f2021-04-20

  Deserialization of Untrusted Data in PyYAML

  Fixed in: 5.2, 5.2b1

• GHSA-6757-jp84-gxfx2021-04-20

  Improper Input Validation in PyYAML

  Fixed in: 5.3.1

• GHSA-8q59-q68h-6hv42021-03-25

  Improper Input Validation in PyYAML

  Fixed in: 5.4

• GHSA-rprw-h62v-c2w72019-01-04

  PyYAML insecurely deserializes YAML strings leading to arbitrary code execution

  Fixed in: 5.1