GHSA-977C-63XQ-CGW3 opensearch-ruby 2.x before 2.0.2 vulnerable to unsafe YAML deserialization

Impact A YAML deserialization in opensearch-ruby 2.0.0 can lead to unsafe deserialization using YAML.load if the response is of type YAML. Patches The problem has been patched in opensearch-ruby gem version 2.0.2. Workarounds No viable workaround. Please upgrade to 2.0.2 References...