Merge pull request #203 from allegro/pyyaml_cve_fix

Security fix reported by github
allegro · Jan 16, 2019 · 32533c2 · 32533c2
2 parents ad130da + e591827
commit 32533c2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/vaas-app/src/vaas/configuration/loader.py b/vaas-app/src/vaas/configuration/loader.py
@@ -25,6 +25,6 @@ def get_config_tree(self, config_file):
         config_full_path = self.determine_config_file(config_file)
         if config_full_path:
             with open(config_full_path) as file_stream:
-                return yaml.load(file_stream.read())
+                return yaml.safe_load(file_stream.read())
 
         return {}