Skip to content

VCR.py: Arbitrary code execution via unsafe YAML deserialization of cassette files

High severity GitHub Reviewed Published Jun 16, 2026 in kevin1024/vcrpy • Updated Jul 10, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts