From 5809f03937f59d589785396fcef6aa588aeb9598 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Wed, 19 Aug 2026 00:38:56 +0000
Subject: [PATCH] fix: gitlab.bandit.B506 security vulnerability

Automated security fix generated by OrbisAI Security
---
 official/modeling/hyperparams/base_config.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/official/modeling/hyperparams/base_config.py b/official/modeling/hyperparams/base_config.py
index fbb6d77604f..9cf3c888419 100644
--- a/official/modeling/hyperparams/base_config.py
+++ b/official/modeling/hyperparams/base_config.py
@@ -336,7 +336,7 @@ def replace(self, **kwargs):
   def from_yaml(cls, file_path: str):
     # Note: This only works if the Config has all default values.
     with tf.io.gfile.GFile(file_path, 'r') as f:
-      loaded = yaml.load(f, Loader=yaml.FullLoader)
+      loaded = yaml.safe_load(f)
       config = cls()
       config.override(loaded)
       return config