Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Adding rule and test case of python PyYaml FULL_LOAD #2352

Closed
wants to merge 2 commits into from
Closed

Adding rule and test case of python PyYaml FULL_LOAD #2352

wants to merge 2 commits into from

Commits on Aug 25, 2022

  1. Updated rules as full_load is vulnerable to RCE 

    Hello Team,
   The pyyaml is vulnerable to code execution as seen here - yaml/pyyaml#386
I did not find this rule in Semgrep hence added it
    @shivankar-madaan
    shivankar-madaan committed Aug 25, 2022
    Configuration menu
    Copy the full SHA
    20ae41a View commit details
    Browse the repository at this point in the history

  2. adding test rule for avoiding pyyaml full load

    @shivankar-madaan
    shivankar-madaan committed Aug 25, 2022
    Configuration menu
    Copy the full SHA
    47664c2 View commit details
    Browse the repository at this point in the history