Approved changes feed: RSS · Atom

cpe:2.3:a:osbs-client_project:osbs-client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOsbs Client Project (a25a94b2-3c02-5b58-95ab-efbf8551dda8)
ProductOsbs Client (fdf1e148-7f72-5126-8bfc-459ce268c375)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/containerbuildsystem/osbs-client purl2cpe 2026-06-01 10:12:08.396561
pkg:rpm/fedora/osbs-client purl2cpe 2026-06-01 10:12:08.396564
pkg:rpm/opensuse/osbs-client purl2cpe 2026-06-01 10:12:08.396567

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10135 vulnerable 2026-06-08 05:12:22.311417 Details available
HIGH (7.2)
A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files.
Published: 2019-07-11T00:00:00.000Z
Updated: 2024-08-04T22:10:09.963Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.