Skip to content

Commit

Permalink
Fix - Upgrade PyYaml for security reasons
Browse files Browse the repository at this point in the history
In PyYAML before 4.1, the yaml.load() API could execute arbitrary code.
  • Loading branch information
Pierre-Sassoulas committed Jan 9, 2019
1 parent 27ebfd0 commit 8e0dd44
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -4,5 +4,5 @@ django-tastypie==0.14.2 # API
django-registration==3.0 # account logic, views and workflows
pytz==2018.9
ordereddict==1.1
PyYAML==3.13
pyyaml>=4.2b1
pySankeyBeta==1.0.4

0 comments on commit 8e0dd44

Please sign in to comment.