Skip to content

Commit f21bd0e

Browse files
committed
Revert "add security note"
This reverts commit dcd0c2a.
1 parent 97ef57e commit f21bd0e

File tree

1 file changed

+0
-15
lines changed

1 file changed

+0
-15
lines changed

README.md

Lines changed: 0 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -69,21 +69,6 @@ from openapi_spec_validator import openapi_v3_spec_validator
6969
errors_iterator = openapi_v3_spec_validator.iter_errors(spec)
7070
```
7171

72-
## Security Note
73-
74-
PyYAML, a requirement of this project, has a
75-
[security vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2017-18342)
76-
in the default implementation of `yaml.load()`, which allows execution
77-
of arbitrary code while loading a target file or stream. OpenAPI Spec
78-
Validator uses a safe loader to ensure that only Python objects
79-
marked as safe can be executed. Thus, you are not exposed to this
80-
vulnerability by using this package.
81-
82-
If you use `PyYAML` directly, be sure to use `yaml.safe_load()` to
83-
avoid inadvertantly exposing youself to potentially malicous data. The
84-
[PyYAML docs](https://pyyaml.org/wiki/PyYAMLDocumentation#loading-yaml)
85-
describe this issue in detail.
86-
8772
## Related projects
8873

8974
* [openapi-core](https://github.com/p1c2u/openapi-core) is a Python library that adds client-side and server-side support for the OpenAPI.

0 commit comments

Comments
 (0)