CVE-2017-18342 in PyYAML
Zusammenfassung
von MITRE
In PyYAML before 4.1, the yaml.load() API could execute arbitrary code. In other words, yaml.safe_load is not used.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.