# Python3-pyyaml-3.12-12 detected as vulnerable on rocky 8-CVE-2020-14343

**URL:** <https://forums.rockylinux.org/t/python3-pyyaml-3-12-12-detected-as-vulnerable-on-rocky-8-cve-2020-14343/20154>\
**Category:** Rocky Linux Help & Support\
**Created:** [January 21, 2026, 7:22am UTC](https://forums.rockylinux.org/t/python3-pyyaml-3-12-12-detected-as-vulnerable-on-rocky-8-cve-2020-14343/20154 "2026-01-21T07:22:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sagarseapatil](https://avatars.discourse-cdn.com/v4/letter/s/ebca7d/32.png) [@sagarseapatil](https://forums.rockylinux.org/u/sagarseapatil)\
**Post date:** [January 21, 2026, 7:22am UTC](https://forums.rockylinux.org/t/python3-pyyaml-3-12-12-detected-as-vulnerable-on-rocky-8-cve-2020-14343/20154/1 "2026-01-21T07:22:02Z")

</div>

Hi,

From one of our sec tool as detected python3-pyyaml-3.12-12 as vulnerable on rocky 8. This is the latest version available at rocky8 upstream.Is CVE-2020-14343 associated with is fixed ?

Any links with the fix will help us.

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [January 21, 2026, 9:16am UTC](https://forums.rockylinux.org/t/python3-pyyaml-3-12-12-detected-as-vulnerable-on-rocky-8-cve-2020-14343/20154/2 "2026-01-21T09:16:31Z")

</div>

The `python3-pyyaml-3.12-12.el8` is a library/module for Python 3.6 – the “platform Python”.

The [cve-details](https://access.redhat.com/security/cve/cve-2020-14343) states that PyYAML of RHEL 8 is “Not Affected”.

* * *

They do note that some Red Hat _applications_ do use affected version of PyYAML,  
but they either call “safe\_load” or specify SafeLoader when callitg “load”.

The question is thus, do you have applications that do not use the safe methods?  
(Naturally, any user could write Python script that does use the unsafe methods.)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [March 22, 2026, 9:16am UTC](https://forums.rockylinux.org/t/python3-pyyaml-3-12-12-detected-as-vulnerable-on-rocky-8-cve-2020-14343/20154/3 "2026-03-22T09:16:51Z")

</div>

Closed on March 22, 2026, 9:16am UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.