Remote Code Execution (RCE)

ruamelyaml is vulnerable to remote code execution RCE. The attack exists because it accepts the invocation of load method with untrusted argument instead of using safe method such as safeload, resulting in deserialization of untrusted objects...