Vendor
An authenticated deserialization vulnerability in the ManageIQ YamlLoadAliases module allows attackers to achieve remote code execution by exploiting a silent fallback to unsafe YAML loading.