Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.
Advisories for Pypi/Transmute-Core package
2023