Merge pull request #15858 from Security-Onion-Solutions/security-fix

Fix unsafe PyYAML load in filecheck
This commit is contained in:
Mike Reeves
2026-05-04 16:16:40 -04:00
committed by GitHub
+1 -1
View File
@@ -15,7 +15,7 @@ from watchdog.observers import Observer
from watchdog.events import FileSystemEventHandler
with open("/opt/so/conf/strelka/filecheck.yaml", "r") as ymlfile:
cfg = yaml.load(ymlfile, Loader=yaml.Loader)
cfg = yaml.safe_load(ymlfile)
extract_path = cfg["filecheck"]["extract_path"]
historypath = cfg["filecheck"]["historypath"]