Nameko Arbitrary code execution due to YAML deserialization
Nameko can be tricked to perform arbitrary code execution when deserialising a YAML config file. Example:
Advisories for Pypi/Nameko package
2021
Nameko can be tricked to perform arbitrary code execution when deserialising a YAML config file. Example: