Use yaml.safe_load()

PyYAML.load() can create arbitrary Python objects, a malicious actor could exploit this to run arbitrary code.