Post

PyYAML's yaml.load carried a 9.8 CVSS CVE. PyTorch's torch.load(weights_only=True), called safe in its own docs, carried a 9.3 CVE in 2025. BrassCoders flags pickle.load and unsafe yaml.load on every scan. Read more → https://brss.fyi/11ia

brss.fyiThe CVE Record on Insecure Deserialization in AI Python CodePyYAML's yaml.load carried a CVSS 9.8 CVE. PyTorch's torch.load carried one at 9.3, in 2025, in a flag documented as safe. Here is the actual track record.

0 reposts0 likes

No replies yet.