CVE-2021-24040
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code ex…
Published: 2021-09-10 · CVSS: Unscored
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7