hasura/graphql-engine
1
0
Fork 0
mirror of https://github.com/hasura/graphql-engine.git synced 2024-12-14 17:02:49 +03:00
Code Issues Projects Releases Wiki Activity

fix docs vulnerability in pyyaml (#1324)

Browse Source 
CVE-2017-18342 https://nvd.nist.gov/vuln/detail/CVE-2017-18342

high severity
Vulnerable versions: < 4.2b1
Patched version: 4.2b1

In PyYAML before 4.1, the yaml.load() API could execute arbitrary code. In other words, yaml.safe_load is not used.
This commit is contained in:
Rikin Kachhia 2019-01-07 15:13:53 +05:30 committed by Shahidh K Muhammed
parent b04539bfe6
commit 4470c34fe1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/requirements.txt
View File

@ -17,7 +17,7 @@ pathtools==0.1.2
port-for==0.3.1
Pygments==2.2.0
pytz==2017.2
PyYAML==3.13
PyYAML==4.2b1
requests-file==1.4.2
requests==2.20.0
six==1.11.0