Advisories for Pypi/Django-Tastypie package

2014

Unsafe use of yaml.load

Tastypie uses the yaml.load method, which is unsafe. In certain circumstances this could be used to allow remote execution of arbitrary code. Servers without the yaml module installed are not affected.