There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML
    data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load
    method. (CVE-2011-4103)

據發現，Piston 架構可還原序列化不受信任的 YAML 和 Pickle 資料，進而導致遠端程式碼執行 (CVE-2011-4103)。

已发现 Piston 框架可反序列化不受信任的 YAML 和 Pickle 数据，进而导致远程代码执行 (CVE-2011-4103)。

Piston フレームワークは、信頼できない YAML データや Pickle データを逆シリアル化し、リモートコードの実行を引き起こす可能性があることが判明しました（CVE-2011-4103）。

It was discovered that the Piston framework can deserializes untrusted YAML and Pickle data, leading to remote code execution (CVE-2011-4103 ).

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
422781	SCA: security update for django-piston (GHSA-pvhp-v9qp-xf5r)	Tenable Self-Hosted Container Security	SCA Checks	2025/3/29	2026/7/2	critical
422781	SCA: security update for django-piston (GHSA-pvhp-v9qp-xf5r)	Tenable Cloud Security	SCA Checks	2025/3/29	2026/7/2	critical
56785	Debian DSA-2344-1：python-django-piston - 還原序列化弱點	Nessus	Debian Local Security Checks	2011/11/14	2021/1/11	high
56785	Debian DSA-2344-1：python-django-piston - 反序列化漏洞	Nessus	Debian Local Security Checks	2011/11/14	2021/1/11	high
56785	Debian DSA-2344-1：python-django-piston - 逆シリアル化の脆弱性	Nessus	Debian Local Security Checks	2011/11/14	2021/1/11	high
56785	Debian DSA-2344-1 : python-django-piston - deserialization vulnerability	Nessus	Debian Local Security Checks	2011/11/14	2021/1/11	high

检测

插件搜索

critical

critical

high

high

high

high