TI-2022-01345 CVE-2022-1471 · GHSA-mjmj-j48q-9wg2
Remote Code execution in SnakeYAML
Priority CRITICAL 88
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.
RHSA-2023:7697
AMQ Clients 2023.Q4
Released 2023-12-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat AMQ Clients
Fixes 8 records
TI-2023-01295 CVE-2023-1370 · GHSA-493p-pfq6-5258
Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON
Priority HIGH 72
[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib.
TI-2022-09423 CVE-2022-25857 · GHSA-3mc7-4q67-w48m
Denial of service (DoS) in org.yaml:snakeyaml
Priority LOW 38
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
TI-2023-17287 CVE-2023-34462 · GHSA-6mjq-h674-j845
netty-handler SniHandler 16MB allocation
Priority LOW 34
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
TI-2023-21041 CVE-2023-40167 · GHSA-hmr7-m48g-48f6
Jetty accepts "+" prefixed value in Content-Length
Priority LOW 33
Jetty is a Java based web server and servlet engine.
TI-2022-18259 CVE-2022-38749 · GHSA-c4r9-r8fh-9vj2
DoS in SnakeYAML
Priority LOW 33
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
TI-2022-20206 CVE-2022-41854 · GHSA-w37g-rhq8-7m4j
Stack Overflow in Snakeyaml
Priority LOW 32
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).
TI-2023-16916 CVE-2023-34050 · GHSA-24f5-5fmf-pwmc
Spring AMQP Deserialization Vulnerability
Priority LOW 27
In spring AMQP versions 1.0.0 to 2.4.16 and 3.0.0 to 3.0.9 , allowed list patterns for deserializable class names were added to Spring AMQP, allowing users to lock down deserialization of data in messages from untrusted…