id: PYSEC-2018-103
details: ymlref allows code injection.
affected:
- package:
    name: ymlref
    ecosystem: PyPI
    purl: pkg:pypi/ymlref
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: '0'
  versions:
  - 0.1.0
  - 0.1.1
references:
- type: REPORT
  url: https://github.com/dexter2206/ymlref/issues/2
- type: ADVISORY
  url: https://github.com/advisories/GHSA-8r8j-xvfj-36f9
aliases:
- CVE-2018-20133
- GHSA-8r8j-xvfj-36f9
modified: '2021-09-26T23:33:39.795406Z'
published: '2018-12-17T19:29:00Z'