Files
google--adk-python/tests
prasanna8585 924d802f5b fix: block yaml and ruamel deserialization in agent-config code references
Merge https://github.com/google/adk-python/pull/6646

Reject yaml and ruamel unsafe/full loaders in config agent to prevent RCE.
Note: ruamel is a transitive dev/test dependency, but is blocked to prevent RCE if present in the environment.
PiperOrigin-RevId: 967340296
2026-08-19 12:12:55 -07:00
..
2026-01-20 14:50:09 -08:00