TI-2022-18262 CVE-2022-38752 · GHSA-9w3m-gqgf-c4p9
DoS in SnakeYAML
Priority MEDIUM 62
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
RHSA-2022:8524
Red Hat Data Grid 8.4.0 security update
Released 2022-11-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Data Grid 8.4.0
Fixes 8 records
TI-2022-08636 CVE-2022-24823 · GHSA-269q-hmxg-m83q
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
Priority MEDIUM 58
Netty is an open-source, asynchronous event-driven network application framework.
TI-2022-09423 CVE-2022-25857 · GHSA-3mc7-4q67-w48m
Denial of service (DoS) in org.yaml:snakeyaml
Priority LOW 38
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
TI-2022-07699 CVE-2022-23647 · GHSA-3949-f494-cm99
Cross-site Scripting in Prism
Priority LOW 36
Prism is a syntax highlighting library.
TI-2022-18261 CVE-2022-38751 · GHSA-98wm-3w3q-mw94
DoS in SnakeYAML
Priority LOW 33
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
TI-2022-18259 CVE-2022-38749 · GHSA-c4r9-r8fh-9vj2
DoS in SnakeYAML
Priority LOW 33
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
TI-2022-18260 CVE-2022-38750 · GHSA-hhhw-99gj-p3c3
DoS in SnakeYAML
Priority LOW 31
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
TI-2022-00171 CVE-2022-0235 · GHSA-r683-j2x4-v87g
Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch
Priority LOW 31
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor