Security Fix for Arbitrary Code Execution - huntr.dev (#1962)

Co-authored-by: Anon-Artist <61599526+Anon-Artist@users.noreply.github.com> Co-authored-by: Jamie Slome <jamie@418sec.com>
ultralytics · Jan 17, 2021 · b5d851d · b5d851d
1 parent 18c2588
commit b5d851d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/train.py b/train.py
@@ -59,7 +59,7 @@ def train(hyp, opt, device, tb_writer=None, wandb=None):
     cuda = device.type != 'cpu'
     init_seeds(2 + rank)
     with open(opt.data) as f:
-        data_dict = yaml.load(f, Loader=yaml.FullLoader)  # data dict
+        data_dict = yaml.load(f, Loader=yaml.SafeLoader)  # data dict
     with torch_distributed_zero_first(rank):
         check_dataset(data_dict)  # check
     train_path = data_dict['train']