CVE-2019-3575: Improper Control of Generation of Code ('Code Injection')
(updated )
Sqla_yaml_fixtures allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.
References
Detect and mitigate CVE-2019-3575 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →