Now, the load()
function requires parameter loader=Loader
.
If your YAML file contains just simple YAML (str, int, lists), try to use yaml.safe_load()
instead of yaml.load()
.
And If you need FullLoader, you can use yaml.full_load()
.
Starting from pyyaml>=5.4, it doesn’t have any discovered critical vulnerabilities, pyyaml status.
source: https://stackoverflow.com/a/1774043/13755823
yaml.safe_load() should always be preferred unless you explicitly need
the arbitrary object serialization/deserialization provided in order
to avoid introducing the possibility for arbitrary code execution.
More about yaml.load(input)
here.