Arbitrary Code Execution

owlmixin is vulnerable to arbitrary code execution attacks. It does not use the safe_load() method to parse YAML in the parse_yaml_query() method of parser.py, allowing the attacker to load any malicious Python code to the YAML parser.