This YAML deserialization vulnerability, rated a 9.3 in severity, was responsibly reported to TensorFlow maintainers by security researcher Arjun Shibu. And the source of the flaw, you ask?

There is actually a configuration management system that converts YAML configuration files for system modules and stores them in a database in serialized, PHP data format. JSON, XML and YAML have ...