Jyaml Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jyaml Project records in CISA KEV

No Jyaml Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Jyaml · all components

TI-2020-06778 CVE-2020-8441 · GHSA-4qhr-q7wf-94xp

MEDIUM 50

JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04962 Published 2020-02-19 No fix listed CWE-502