Avoid dangerous file parsing and object serialization libraries — OpenStack Security Advisories 0.0.1.dev286 documentationAvoid dangerous file parsing and object serialization libraries Avoid dangerous file parsing and object serialization libraries¶ Many common libraries that are often used for reading configuration files and deserializing objects are very dangerous because they can allow execution of arbitrary code. By default, libraries such as PyYAML and pickle do not provide strong separation of data and code, a
