https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:13:48 +0000 https://vulnerability.circl.lu/vuln/cve-2025-56005 <p><strong>Affected:</strong> Red Hat Fence Agents Remediation Operator, Red Hat Migration Toolkit for Containers, Red Hat Migration Toolkit for Virtualization, Red Hat OpenShift Developer Tools and Services, Red Hat OpenShift Pipelines, Red Hat OpenShift Service Mesh 2, Red Hat OpenShift Service Mesh 3, Red Hat Advanced Cluster Security 4, Red Hat Ansible Automation Platform Ansible Core 2, Red Hat Ceph Storage 7 and 17 more</p> <p>An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.</p> <p><strong>Affected:</strong> Red Hat Fence Agents Remediation Operator, Red Hat Migration Toolkit for Containers, Red Hat Migration Toolkit for Virtualization, Red Hat OpenShift Developer Tools and Services, Red Hat OpenShift Pipelines, Red Hat OpenShift Service Mesh 2, Red Hat OpenShift Service Mesh 3, Red Hat Advanced Cluster Security 4, Red Hat Ansible Automation Platform Ansible Core 2, Red Hat Ceph Storage 7 and 17 more</p> <p>An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.</p> https://vulnerability.circl.lu/vuln/cve-2025-56005