Martin Bašti

Name of the Vulnerable Software and Affected Versions: osbs-client versions 0.46 through 0.56.0 Description: A flaw was found in the `yaml.load()` function, allowing insecure use that enables loading of suspicious objects for code execution via parsing of malicious YAML files. Recommendations: For osbs-client versions 0.46 through 0.56.0, update to version 0.56.1 or later to resolve the issue. As a temporary workaround, consider disabling the use of the `yaml.load()` function until a patch is available. Restrict access to parsing YAML files to minimize the risk of exploitation.