PyYAML's load function has been unsafe since the first release in May 2006. It has always been documented that way in bold type: PyYAMLDocumentation. PyYAML has always provided a safe_load function that can load a subset of YAML without exploit. In 2017, a CVE was filed against PyYAML because it was capable of being exploited on untrusted input using the load function, even though PyYAML was inten
