oss-security - Re: CVE for PyYAML RCE-factory API

Message-ID: <20180627033113.GC14157@hunt>
Date: Tue, 26 Jun 2018 20:31:13 -0700
From: Seth Arnold <seth.arnold@...onical.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE for PyYAML RCE-factory API

On Tue, Jun 26, 2018 at 09:18:39PM -0400, Alex Gaynor wrote:
> Because of the degree to which this API presented a footgun, I would like
> to request a CVE for it.

This makes sense to me. You can make CVE requests on:

https://cveform.mitre.org/

Thanks

Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.