File tree Expand file tree Collapse file tree 1 file changed +0
-15
lines changed Expand file tree Collapse file tree 1 file changed +0
-15
lines changed Original file line number Diff line number Diff line change @@ -69,21 +69,6 @@ from openapi_spec_validator import openapi_v3_spec_validator
6969errors_iterator = openapi_v3_spec_validator.iter_errors(spec)
7070```
7171
72- ## Security Note
73-
74- PyYAML, a requirement of this project, has a
75- [ security vulnerability] ( https://nvd.nist.gov/vuln/detail/CVE-2017-18342 )
76- in the default implementation of ` yaml.load() ` , which allows execution
77- of arbitrary code while loading a target file or stream. OpenAPI Spec
78- Validator uses a safe loader to ensure that only Python objects
79- marked as safe can be executed. Thus, you are not exposed to this
80- vulnerability by using this package.
81-
82- If you use ` PyYAML ` directly, be sure to use ` yaml.safe_load() ` to
83- avoid inadvertantly exposing youself to potentially malicous data. The
84- [ PyYAML docs] ( https://pyyaml.org/wiki/PyYAMLDocumentation#loading-yaml )
85- describe this issue in detail.
86-
8772## Related projects
8873
8974* [ openapi-core] ( https://github.com/p1c2u/openapi-core ) is a Python library that adds client-side and server-side support for the OpenAPI.
You can’t perform that action at this time.
0 commit comments