CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-3575
Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sqla_yaml_fixtures_project:sqla_yaml_fixtures
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2x54-j4m3-r6wx | PyPI | sqla-yaml-fixtures | <=0.9.1 | no fix published |
| PYSEC-2019-122 | PyPI | sqla-yaml-fixtures | <1.0.0 | 1.0.0 |