Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

config = yaml.load(fp) is deprecated in recent pyyaml releases #447

Closed
brews opened this issue Sep 5, 2019 · 1 comment · Fixed by #448
Closed

config = yaml.load(fp) is deprecated in recent pyyaml releases #447

brews opened this issue Sep 5, 2019 · 1 comment · Fixed by #448
Assignees
Milestone

Comments

@brews
Copy link
Member

brews commented Sep 5, 2019

See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation

We need to explicitly specify a loader to use (passed as arg to yaml.load()).

This is a security issue. Should be a straightforward patch.

@brews brews self-assigned this Sep 5, 2019
@brews brews mentioned this issue Sep 11, 2019
5 tasks
@delgadom
Copy link
Member

Thank you @brews!!!

@brews brews added this to the v0.4.0 milestone Nov 1, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants