VDB
Sign up
—

PYSEC-2021-86

Quick fix

PYSEC-2021-86 — pyqlib: upgrade to the fixed version with the command below.

pip install --upgrade 'pyqlib>=0.6.3'

Details

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/pyqlib
Introduced in: 0Fixed in: 0.6.3
Fixpip install --upgrade 'pyqlib>=0.6.3'

References