Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Yaml Project Clear all filters
TI-2023-02110 CVE-2023-2251 · GHSA-f9xv-q969-pqx4

Uncaught Exception in eemeli/yaml

Priority HIGH 72

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01093 Published 2023-04-24 Fixed in 2.0.0-5, 2.2.2 CWE-248
TI-2022-02826 CVE-2022-3064 · GHSA-6q6q-88xp-6f2r

Excessive resource consumption in gopkg.in/yaml.v2

Priority LOW 37

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01871 Published 2022-12-27 Partial fix · 2.2.4 CWE-400
TI-2021-03095 CVE-2021-4235 · GHSA-r88r-gmrh-7j83

Denial of service in gopkg.in/yaml.v2

Priority MEDIUM 58

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00427 Published 2022-12-27 Partial fix · 2.2.3