Read the docs

Yamldotnet Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Yamldotnet Project records in CISA KEV

No Yamldotnet Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 37

YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deserialize user-controlled types in the line "currentType = Type.…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01469 Published 2018-07-13 Fixed in 5.0.0 CWE-502
Open these records in search →