confidence@0.1.1 vulnerabilities

Simple module to load and use configuration in a clean, 'pythonic' way.

Direct Vulnerabilities

Known vulnerabilities in the confidence package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Arbitrary Code Execution

confidence makes it easy to load one or multiple sources of configuration values and exposes them as a simple to use Python object.

Affected versions of this package are vulnerable to Arbitrary Code Execution via the insecure YAML.load() function.

How to fix Arbitrary Code Execution?

Upgrade confidence to version 0.4 or higher.

[,0.4)