Commits on Oct 19, 2019

1. Update controller.py …

   It is reported that in PyYAML before 4.1, usage of yaml.load() function on untrusted input could lead to arbitrary code execution. It is therefore recommended to use yaml.safe_load() instead. With 4.1, yaml.load() has been changed to call safe_load().
   
   * Report:          http://seclists.org/oss-sec/2018/q2/240
   * Upstream change: yaml/pyyaml#74
   * CVE:             pending
   
   --
   
   Gentoo Security Scout
   Vladimir Krstulja

   

   cz-themax committed Oct 19, 2019
   Configuration menu

   • View commit details
   • Copy full SHA for 5a2651f
   • Browse repository at this point

   Copy the full SHA

   5a2651f View commit details

   Browse the repository at this point in the history