Search vulnerabilities

Results 4

Export CSV
CVE-2021-4235

Denial of service in gopkg.in/yaml.v2

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2023-2251

Uncaught Exception in eemeli/yaml

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products