Skip to content

Security: Insecure YAML Deserialization via yaml.FullLoader #628

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
bachdev wants to merge 2 commits into
base: main
Choose a base branch
from
+2 −2

fix(security): insecure yaml deserialization via `yaml.fullloader`

645784f
Select commit
Loading
Failed to load commit list.
Open

Security: Insecure YAML Deserialization via yaml.FullLoader #628

fix(security): insecure yaml deserialization via `yaml.fullloader`
645784f
Select commit
Loading
Failed to load commit list.
Microsoft GitHub Policy Service / license/cla succeeded Apr 1, 2026 in 0s

All CLA requirements met.

This check verifies that the author has agreed to a CLA with Microsoft.

View more details on Microsoft GitHub Policy Service