Safety vulnerability ID: 41835
The information on this page was manually curated by our Cybersecurity Intelligence Team.
[This advisory has been limited. Please create a free account to view the full advisory.]
Latest version: 0.25.1
A Python workflow library.
[This affected versions has been limited. Please create a free account to view the full affected versions.]
[This fixed versions has been limited. Please create a free account to view the full fixed versions.]
- 🔧 MAINTAIN: update requirement to `pyyaml~=5.4` (221)
The versions of `pyyaml` up to v5.4 contained severe security issues where the default loaders could be abused for arbitrary code execution.
The default `FullLoader` was patched to no longer allow this behavior, but as a result, data sets that could be successfully deserialized with it, now will fail.
This required using the unsafe `Loader` in for the deserialization of the exception state of a process.
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application