Vulnerabilities in Ruamel and Altair

[peppeweb]

Hi all,

We are using great_expectations for a project in our company and we are facing issues with our corporate security scanner, there are two vulnerabilities associated with ruamel (CVE-2019-20478 ) and altair (https://web.archive.org/web/20210413225138/https://www.huntr.dev/bounties/1-pypi-altair/).

The problem is that both packages did not provide a fix in newer versions and consequently for great_expectations doesn't look like there is a fix.

Does anybody knows about this issue and possible solutions?
Thanks in advance
Giuseppe