Get the Whitepaper called YAML Deserialization Attack in Python.
You can download it from the following link: https://packetstormsecurity.com/files/download/155299/yaml-deserialization.pdf
Source: https://packetstormsecurity.com/files/155299/YAML-Deserialization-Attack-In-Python.html