faucetsdn/faucet

Upgrading pyyaml to >= 5.4

henry54809 opened this issue · 2 comments

henry54809 commented

Hi,
There is a critical vulnerability for pyyaml < 5.4 that allows arbitrary code execution when processing untrusted yaml file. For more details, please see here: https://nvd.nist.gov/vuln/detail/CVE-2020-14343

gizmoguy commented

I got #3962 merged which should address this.

henry54809 commented

Thanks for updating this!