Read the docs
Red Hat Security Advisory

RHSA-2022:6757

Red Hat build of Eclipse Vert.x 4.3.3 security update

Released 2022-10-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2022-18262 CVE-2022-38752 · GHSA-9w3m-gqgf-c4p9

DoS in SnakeYAML

Priority MEDIUM 62

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02695 Published 2022-09-05 Partial fix · 1.32 CWE-121
Priority LOW 38

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02932 Published 2022-08-30 Partial fix · 1.31 CWE-776
TI-2022-18261 CVE-2022-38751 · GHSA-98wm-3w3q-mw94

DoS in SnakeYAML

Priority LOW 33

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02032 Published 2022-09-05 Partial fix · 1.31 CWE-121
TI-2022-18259 CVE-2022-38749 · GHSA-c4r9-r8fh-9vj2

DoS in SnakeYAML

Priority LOW 33

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02199 Published 2022-09-05 Partial fix · 1.31 CWE-121
TI-2022-18260 CVE-2022-38750 · GHSA-hhhw-99gj-p3c3

DoS in SnakeYAML

Priority LOW 31

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01268 Published 2022-09-05 Partial fix · 1.31 CWE-121