Duke-GCB / Duke-GCB/TrackHubGenerator
pyyaml vulnerability
Open
- Dominant language
- Python
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
https://nvd.nist.gov/vuln/detail/CVE-2017-18342
Details: https://github.com/yaml/pyyaml/issues/243#issuecomment-451540701
The suggested version 4.1 is a prerelease so not a good option currently.
According to the details link above using `yaml.safe_load` instead of `yaml.load` fixes this issue.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.