Merge pull request #23 from 418sec/1-other-postgresql-metrics

Security Fix for Arbitrary Code Execution - huntr.dev
spotify · Feb 25, 2021 · 6c16a8b · 6c16a8b
2 parents 418e4ad + 4f41206
commit 6c16a8b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/postgresql_metrics/common.py b/postgresql_metrics/common.py
@@ -113,6 +113,6 @@ def find_and_parse_config(config_path):
         current_path = os.path.join(config_dir, config_filename)
         if os.path.isfile(current_path):
             with open(current_path, 'r') as f:
-                read_config_dict = yaml.load(f)
+                read_config_dict = yaml.safe_load(f)
             config_dict = merge_configs(read_config_dict, config_dict)
     return config_dict