The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Link | Tags |
---|---|
https://github.com/bbangert/beaker/issues/191 | third party advisory |
https://www.openwall.com/lists/oss-security/2020/05/14/11 | third party advisory mailing list |
https://bugzilla.redhat.com/show_bug.cgi?id=1850105 | issue tracking third party advisory |