description: modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
problem types: CWE-242
affected:
{
product: modulemd
vendor: Fedora Modularity
versions:
lessThanOrEqual: 1.3.1, status: affected, version: unspecified, versionType: custom
}