Remarshal-project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Remarshal-project records in CISA KEV

No Remarshal-project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Remarshal · all components

TI-2023-25489 CVE-2023-47163 · GHSA-gw7g-qr8w-3448

HIGH 72

Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2023-11-13 Fixed in v0.17.1, 0.17.1 CWE-674