CVE-2023-47204: Toumorokoshi Transmute-Core

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.

Affected products

• Toumorokoshi Transmute-Core: before 1.13.5 (fixed in 1.13.5)

Published 2023-11-02. Last modified 2026-06-17.