New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump pyyaml from 3.13 to 5.1 and use safe_load #430

Open

Ashex opened this issue Mar 17, 2021 · 1 comment

Labels

bug

Milestone

Collaborator

Ashex commented Mar 17, 2021

There's been a few security vulnerabilities since 3.13 was released. We need to upgrade to 5.1 and switch yaml usage to safe_load.

Ashex added the bug label

Ashex added this to the 2.x milestone

Ashex linked a pull request

that will close this issue

Bump pyyaml from 3.13 to 5.1 in /will/requirements #416

Closed

Collaborator Author

Ashex commented Mar 19, 2021

pyyaml is being raised to 5.4 in #432 so only remaining work is switching to safe_load.

Ashex modified the milestones: 2.x, 2.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment