Security fix for pyyaml

See yaml/pyyaml#243
Fatal1ty · Jan 20, 2019 · e0cc6ba · e0cc6ba
1 parent 0998233
commit e0cc6ba
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mashumaro/serializer/yaml.py b/mashumaro/serializer/yaml.py
@@ -9,4 +9,4 @@ def to_yaml(self):
 
     @classmethod
     def from_yaml(cls, data: bytes):
-        return cls.from_dict(yaml.load(data), use_bytes=False)
+        return cls.from_dict(yaml.safe_load(data), use_bytes=False)