Yaml Project vulnerabilities

4 vulnerabilities

Known vulnerabilities in Yaml Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
  • Yaml4 vulnerabilities
PrioritiseCVE-2023-2251eemeli · eemeli/yaml +6 moreUncaught Exception in eemeli/yamlUncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.CVSS7.5HighEPSS1.09%PrioritiseCVE-2022-3064gopkg.in/yaml.v2 +25 moreExcessive resource consumption in gopkg.in/yaml.v2Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.CVSS7.5HighEPSS1.87%RoutineCVE-2021-4235gopkg.in/yaml.v2 +15 moreDenial of service in gopkg.in/yaml.v2Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.CVSS5.5MediumEPSS0.43%PrioritiseCVE-2022-28948netapp · astra_trident +66 morenetapp astra_tridentAn issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.CVSS7.5HighEPSS3.96%