Advisoriesby IbisqlibGHSA-hjr4-fhgp-23g9
qlib Deserialization of Untrusted Data vulnerability
Fix: upgrade to 0.7.0 or later
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| pyqlib PyPI | < 0.7.0 | 0.7.0 |