—
PYSEC-2019-122
Quick fix
PYSEC-2019-122 — sqla-yaml-fixtures: upgrade to the fixed version with the command below.
pip install --upgrade 'sqla-yaml-fixtures>=1.0.0'Details
Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/sqla-yaml-fixtures
Introduced in:
0Fixed in: 1.0.0Fix
pip install --upgrade 'sqla-yaml-fixtures>=1.0.0'