What’s Vulnerable › Vulnerabilities

CVE-2021-27213

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-02-14 · updated 2026-06-17
• Weakness: CWE-502

Description

config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used.

Affected products

• Pystemon Project Pystemon: before 2021-02-13 — fixed in 2021-02-13

How to fix

Upgrade to a fixed version: Pystemon Project Pystemon 2021-02-13. Check the vendor advisory for mitigations.

References

• https://github.com/cvandeplas/pystemon/commit/dbeb87afefdb63de2f4cff69b6f10c5965d14b54
• https://www.huntr.dev/bounties/1-other-pystemon/
• https://github.com/cvandeplas/pystemon/commit/dbeb87afefdb63de2f4cff69b6f10c5965d14b54
• https://www.huntr.dev/bounties/1-other-pystemon/

Get alerted when CVE-2021-27213 or the next vulnerability affects your stack