All rules →
Rules / Python
SHIELD-PY-013

YAML deserialization with yaml.load (unsafe)

highPythonCWE-502CVSS 8.1

What it detects

yaml.load() without Loader can deserialize arbitrary Python objects.

How to fix

Use yaml.safe_load() instead of yaml.load() to prevent arbitrary object deserialization.

Scan your repo freeFull documentation
Back to all rules
SHIELD-PY-013: YAML deserialization with yaml.load (unsafe) — Zennoxa Shield