[
  {
    "id": "YAML001",
    "pattern": "yaml\\.load\\s*\\((?![^)]*[Ll]oader\\s*=\\s*yaml\\.(?:Safe|Base)Loader)|YAML\\.load\\s*\\(",
    "flags": "i",
    "category": "yaml_injection",
    "description": "YAML injection (yaml.load without safe_load)",
    "language": [
      "js",
      "ts",
      "python",
      "java",
      "go",
      "csharp",
      "php",
      "ruby",
      "rust",
      "kotlin"
    ],
    "severity": "medium"
  }
]