Search/CVE-2011-4104
● CVE

CVE-2011-4104

VendordjangoprojectProducttastypieDiscoveredOct 27, 2014UpdatedMay 6, 2026

The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

View graph Watch Export
CVSS v3.1
—
EPSS
2.43%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
2 relationships
Timeline
disclosure → media coverage
Oct 27, 2014
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026