Skip to content
This repository has been archived by the owner on Jun 24, 2024. It is now read-only.

yaml.load() without Loader is deprecated #33

Closed
dleitz42 opened this issue Mar 19, 2019 · 4 comments
Closed

yaml.load() without Loader is deprecated #33

dleitz42 opened this issue Mar 19, 2019 · 4 comments

Comments

@dleitz42
Copy link

dleitz42 commented Mar 19, 2019 •
edited
Loading

Hi,

after upgrade to pyyaml-5.1 some python deprecation warnings are shown.

Message

/usr/local/lib/python3.6/site-packages/j2cli/context.py:88: YAMLLoadWarning: calling yaml.load() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.
return yaml.load(data_string)

Environment
OS: Centos7
Python3: v3.6.6 (via EPEL)
j2cli: v0.3.5.post1 (via pip3)
Jinja2: v2.10 (via pip3)
PyYAML: v5.1 (via pip3)

Thanks!
kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
3da963b 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
25d0e69 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
32a2c4e 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
91fe172 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
@kolypto
Copy link
Owner

kolypto commented Mar 21, 2019

Fixed in 0.3.6. Thanks! :)

@sumnerwarren
Copy link

FullLoader was not added to PyYAML until version 5.1, which means j2cli is now broken for anyone using an older version of PyYAML. A version constraint should probably be added in setup.py.

@burncycl burncycl mentioned this issue Mar 21, 2019
Closed
@kolypto kolypto reopened this Mar 21, 2019
@kolypto
Copy link
Owner

kolypto commented Mar 21, 2019

Sorry! I removed the broken release from pypi for now

kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
ce286be 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
181d990 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
9e1febb 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
c19d120 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
kolypto added a commit that referenced this issue Mar 21, 2019
@kolypto
fixes #33: PyYAML CVE fixed, using the safe FullLoader
c65c64a 
See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
@kolypto
Copy link
Owner

kolypto commented Mar 21, 2019

Fixed in 0.3.6.post1

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@sumnerwarren @kolypto @dleitz42