You are working on the flyteorg/flytekit repository. The source code is checked out at /testbed at commit…
You are working on the flyteorg/flytekit repository. The source code is checked out at /testbed at commit…: a task in SWE-Lego-RL-2699 (Harbor dataset). Flyte's type system serializes to pickle if the data type doesn't have a registered TypeTransformer . This format is known to be insecure as it…
The task
Flyte's type system serializes to `pickle` if the data type doesn't have a registered `TypeTransformer`. This format is known to be insecure as it allows remote code execution at the deserialization phase.
Part of Lego-X/Lego-RL-2699.