CVE-2018-13043

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.

• CWE-94

• https://bugs.debian.org/902409Patch, Vendor Advisory
• https://usn.ubuntu.com/3704-1/Third Party Advisory
• https://bugs.debian.org/902409Patch, Vendor Advisory
• https://usn.ubuntu.com/3704-1/Third Party Advisory

Published

Jul 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13038OpenSID 18.06-pasca has an Unrestricted File Upload vulnerab…
• CVE-2018-13039OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS)…
• CVE-2018-1304The URL pattern of "" (the empty string) which exactly maps …
• CVE-2018-13040OpenSID 18.06-pasca has a CSRF vulnerability. This vulnerabi…
• CVE-2018-13041The mint function of a smart contract implementation for Lin…7.5
• CVE-2018-13042The 1Password application 6.8 for Android is affected by a D…
• CVE-2018-13045SQL injection vulnerability in the "Bazar" page in Yeswiki C…
• CVE-2018-13049The constructSQL function in inc/search.class.php in GLPI 9.…
• CVE-2018-1305Security constraints defined by annotations of Servlets in A…
• CVE-2018-13050A SQL Injection vulnerability exists in Zoho ManageEngine Ap…
• CVE-2018-13052In CyberArk Endpoint Privilege Manager (formerly Viewfinity)…
• CVE-2018-13053The alarm_timer_nsleep function in kernel/time/alarmtimer.c …