{"data":{"id":"d3169ff8-6379-4117-906e-6a71540b7808","title":"GHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loading","summary":"Hydra's legacy target blacklist omits PyYAML's unsafe loading functions, so an application that passes attacker-controlled targets and arguments to instantiate() can let yaml.unsafe_load run Python code from a config-controlled YAML stream. The attacker must control the target and arguments, and the callable runs with the application's process privileges; the affected ranges are hydra-core 1.3.6 through 1.3.7 and the 1.4 prerelease legacy path (1.4.0.dev9, 1.4.0.dev10, 1.4.0rc1, 1.4.0rc2).","solution":"The fix blocks the yaml. target namespace except for yaml.safe_load, yaml.safe_load_all, yaml.safe_dump, and yaml.safe_dump_all. Workarounds: do not pass untrusted configuration to instantiate() or call(), and for Hydra 1.4 supply a narrow execution whitelist from trusted Python code.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-wf6j-7hvr-gr93","publishedAt":"2026-10-27T17:08:41.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["hydra-core@>= 1.4.0.dev9, < 1.4.0rc3 (fixed: 1.4.0rc3)","hydra-core@>= 1.3.6, < 1.3.8 (fixed: 1.3.8)"],"affectedPackageNames":["hydra-core"],"affectedPackageRefs":["pypi:hydra-core"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Hydra (hydra-core)","PyYAML","Hugging Face"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-wf6j-7hvr-gr93"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-27T17:08:41.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0010"]}}