[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-28948":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":34,"duplicate_of":9,"upstream":37,"downstream":38,"duplicates":59,"related":60,"reserved_at":9,"published_at":87,"modified_at":88,"state":89,"summary":90,"references_raw":98,"kevs":143,"epss":144,"epss_history":147,"metrics":408,"affected":420},"CVE-2022-28948","An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","weakness","Draft","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-586","Object Injection",[],[25],{"_key":26,"name":27,"source":28,"url":29,"maturity":30,"reliability_score":31,"verified":32,"type":9,"platforms":33,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_GO-YAML_YAML","Yaml","github","https://github.com/go-yaml/yaml/pull/375","poc",0.3,false,[],[35,36],"GHSA-hp87-p4gw-j4gq","GO-2022-0603",[],[39,41,43,45,47,49,51,53,55,57],{"_key":40},"OPENSUSE-SU-2024:0319-1",{"_key":42},"OPENSUSE-SU-2024:12490-1",{"_key":44},"UBUNTU-CVE-2022-28948",{"_key":46},"SUSE-SU-2025:02998-1",{"_key":48},"SUSE-SU-2025:02999-1",{"_key":50},"SUSE-SU-2025:03000-1",{"_key":52},"SUSE-SU-2025:03001-1",{"_key":54},"OPENSUSE-SU-2025:15510-1",{"_key":56},"OPENSUSE-SU-2025:15529-1",{"_key":58},"DEBIAN-CVE-2022-28948",[],[61,62,63,64,65,66,67,68,69,71,73,75,77,79,81,83,85],{"_key":40},{"_key":42},{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":54},{"_key":56},{"_key":70},"CGA-23JM-PW7X-8MMG",{"_key":72},"CGA-5CCC-HWCH-CHHJ",{"_key":74},"CGA-68J8-QFJ3-4FX6",{"_key":76},"CGA-6GW6-GXH7-MM95",{"_key":78},"CGA-792C-CH9C-RFG7",{"_key":80},"CGA-7M43-G3MC-CQ7P",{"_key":82},"CGA-WXQ6-23FQ-F4H4",{"_key":84},"CGA-XPJJ-HV4W-94C5",{"_key":86},"CGA-C83P-WFX4-QXWJ","2022-05-19T19:59:30.000Z","2024-08-03T06:10:57.622Z","Modified",{"cisa_kev":32,"cisa_ransomware":32,"cisa_vendor":9,"epss_severity":91,"epss_score":92,"severity":93,"severity_score":94,"severity_version":95,"severity_source":96,"severity_vector":97,"severity_status":89},"low",0.01524,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[99,111,116,121,125,130,134,139],{"url":100,"sources":101,"tags":104},"https://github.com/go-yaml/yaml/issues/666",[102,96,103],"cve.org","osv_go",[105,106,107,108,109,110],"X Refsource MISC","Exploit","Issue Tracking","Patch","Third Party Advisory","WEB",{"url":112,"sources":113,"tags":114},"https://security.netapp.com/advisory/ntap-20220923-0006/",[102,96],[115,109],"X Refsource CONFIRM",{"url":117,"sources":118,"tags":119},"https://nvd.nist.gov/vuln/detail/CVE-2022-28948",[103],[120],"Advisory",{"url":122,"sources":123,"tags":124},"https://github.com/go-yaml/yaml/issues/665",[103],[110],{"url":126,"sources":127,"tags":128},"https://github.com/go-yaml/yaml/commit/8f96da9f5d5eff988554c1aae1784627c4bf6754",[103],[110,129],"FIX",{"url":131,"sources":132,"tags":133},"https://github.com/go-yaml/yaml/commit/f6f7691b1fdeb513f56608cd2c32c51f8194bf51",[103],[110],{"url":135,"sources":136,"tags":137},"https://github.com/go-yaml/yaml",[103],[138],"PACKAGE",{"url":140,"sources":141,"tags":142},"https://security.netapp.com/advisory/ntap-20220923-0006",[103],[110],[],{"date":145,"score":92,"percentile":146},"2026-06-04",0.81599,[148,152,155,158,161,164,167,170,173,176,179,182,185,187,189,193,196,199,202,205,208,211,214,218,221,224,227,230,234,236,239,242,245,248,250,253,256,259,262,265,268,271,274,277,280,283,286,289,291,294,297,300,303,306,309,312,315,318,321,324,326,329,332,335,338,341,343,346,349,351,353,355,358,361,364,367,370,373,375,377,380,383,386,388,390,393,396,399,402,404],{"date":149,"score":150,"percentile":151},"2025-11-04",0.01447,0.80106,{"date":153,"score":150,"percentile":154},"2025-11-05",0.80107,{"date":156,"score":150,"percentile":157},"2025-11-06",0.80108,{"date":159,"score":150,"percentile":160},"2025-11-07",0.8012,{"date":162,"score":150,"percentile":163},"2025-11-08",0.80126,{"date":165,"score":150,"percentile":166},"2025-11-09",0.80123,{"date":168,"score":150,"percentile":169},"2025-11-10",0.80117,{"date":171,"score":150,"percentile":172},"2025-11-11",0.80122,{"date":174,"score":92,"percentile":175},"2025-11-12",0.80678,{"date":177,"score":92,"percentile":178},"2025-11-13",0.80683,{"date":180,"score":92,"percentile":181},"2025-11-14",0.80689,{"date":183,"score":92,"percentile":184},"2025-11-15",0.80685,{"date":186,"score":92,"percentile":184},"2025-11-16",{"date":188,"score":92,"percentile":178},"2025-11-17",{"date":190,"score":191,"percentile":192},"2025-11-18",0.00359,0.5529,{"date":194,"score":191,"percentile":195},"2025-11-19",0.55306,{"date":197,"score":191,"percentile":198},"2025-11-20",0.55295,{"date":200,"score":92,"percentile":201},"2025-11-21",0.80702,{"date":203,"score":92,"percentile":204},"2025-11-22",0.80703,{"date":206,"score":92,"percentile":207},"2025-11-23",0.80693,{"date":209,"score":92,"percentile":210},"2025-11-24",0.80694,{"date":212,"score":92,"percentile":213},"2025-11-25",0.80698,{"date":215,"score":216,"percentile":217},"2025-11-26",0.01996,0.83072,{"date":219,"score":216,"percentile":220},"2025-11-27",0.83071,{"date":222,"score":216,"percentile":223},"2025-11-28",0.83061,{"date":225,"score":216,"percentile":226},"2025-11-29",0.83076,{"date":228,"score":216,"percentile":229},"2025-11-30",0.8308,{"date":231,"score":232,"percentile":233},"2025-12-01",0.0123,0.78657,{"date":235,"score":232,"percentile":233},"2025-12-02",{"date":237,"score":232,"percentile":238},"2025-12-03",0.78655,{"date":240,"score":216,"percentile":241},"2025-12-04",0.83081,{"date":243,"score":216,"percentile":244},"2025-12-05",0.83087,{"date":246,"score":216,"percentile":247},"2025-12-06",0.83084,{"date":249,"score":216,"percentile":229},"2025-12-07",{"date":251,"score":216,"percentile":252},"2025-12-08",0.83083,{"date":254,"score":216,"percentile":255},"2025-12-09",0.83097,{"date":257,"score":216,"percentile":258},"2025-12-10",0.8312,{"date":260,"score":216,"percentile":261},"2025-12-11",0.83136,{"date":263,"score":216,"percentile":264},"2025-12-12",0.83145,{"date":266,"score":216,"percentile":267},"2025-12-13",0.83143,{"date":269,"score":216,"percentile":270},"2025-12-14",0.8314,{"date":272,"score":216,"percentile":273},"2025-12-15",0.83141,{"date":275,"score":216,"percentile":276},"2025-12-16",0.83151,{"date":278,"score":216,"percentile":279},"2025-12-17",0.8316,{"date":281,"score":216,"percentile":282},"2025-12-18",0.83167,{"date":284,"score":216,"percentile":285},"2025-12-19",0.8317,{"date":287,"score":216,"percentile":288},"2025-12-20",0.83163,{"date":290,"score":216,"percentile":288},"2025-12-21",{"date":292,"score":216,"percentile":293},"2025-12-22",0.83165,{"date":295,"score":216,"percentile":296},"2025-12-23",0.83172,{"date":298,"score":216,"percentile":299},"2025-12-24",0.83181,{"date":301,"score":216,"percentile":302},"2025-12-25",0.83195,{"date":304,"score":216,"percentile":305},"2025-12-26",0.83199,{"date":307,"score":216,"percentile":308},"2025-12-27",0.83239,{"date":310,"score":216,"percentile":311},"2025-12-28",0.83186,{"date":313,"score":216,"percentile":314},"2025-12-29",0.83182,{"date":316,"score":216,"percentile":317},"2025-12-30",0.83188,{"date":319,"score":216,"percentile":320},"2025-12-31",0.83201,{"date":322,"score":232,"percentile":323},"2026-01-01",0.78815,{"date":325,"score":232,"percentile":323},"2026-01-02",{"date":327,"score":232,"percentile":328},"2026-01-03",0.7881,{"date":330,"score":216,"percentile":331},"2026-01-04",0.83184,{"date":333,"score":216,"percentile":334},"2026-01-05",0.83179,{"date":336,"score":216,"percentile":337},"2026-01-06",0.83185,{"date":339,"score":216,"percentile":340},"2026-01-07",0.83187,{"date":342,"score":216,"percentile":302},"2026-01-08",{"date":344,"score":216,"percentile":345},"2026-01-09",0.83196,{"date":347,"score":216,"percentile":348},"2026-01-10",0.83192,{"date":350,"score":216,"percentile":317},"2026-01-11",{"date":352,"score":216,"percentile":331},"2026-01-12",{"date":354,"score":216,"percentile":334},"2026-01-13",{"date":356,"score":216,"percentile":357},"2026-01-14",0.832,{"date":359,"score":216,"percentile":360},"2026-01-15",0.83198,{"date":362,"score":216,"percentile":363},"2026-01-16",0.83206,{"date":365,"score":216,"percentile":366},"2026-01-17",0.83209,{"date":368,"score":216,"percentile":369},"2026-01-18",0.83207,{"date":371,"score":216,"percentile":372},"2026-01-19",0.83204,{"date":374,"score":216,"percentile":372},"2026-01-20",{"date":376,"score":216,"percentile":366},"2026-01-21",{"date":378,"score":216,"percentile":379},"2026-01-22",0.83216,{"date":381,"score":92,"percentile":382},"2026-01-23",0.80898,{"date":384,"score":92,"percentile":385},"2026-01-24",0.80905,{"date":387,"score":92,"percentile":382},"2026-01-25",{"date":389,"score":92,"percentile":382},"2026-01-26",{"date":391,"score":92,"percentile":392},"2026-01-27",0.80902,{"date":394,"score":92,"percentile":395},"2026-01-28",0.809,{"date":397,"score":92,"percentile":398},"2026-01-29",0.80896,{"date":400,"score":92,"percentile":401},"2026-01-30",0.80895,{"date":403,"score":92,"percentile":392},"2026-01-31",{"date":405,"score":406,"percentile":407},"2026-02-01",0.00922,0.75667,[409,418],{"source":96,"cvss_v2_0":410,"cvss_v3_0":9,"cvss_v3_1":415,"cvss_v4_0":9},{"baseScore":411,"baseSeverity":9,"vectorString":412,"impactScore":413,"exploitabilityScore":414},5,"AV:N/AC:L/Au:N/C:N/I:N/A:P",2.9,10,{"baseScore":94,"baseSeverity":416,"vectorString":97,"impactScore":417,"exploitabilityScore":414},"HIGH",6,{"source":103,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":419,"cvss_v4_0":9},{"baseScore":94,"baseSeverity":9,"vectorString":97,"impactScore":417,"exploitabilityScore":414},[421,437,446],{"ecosystem":422,"name":423,"vendor":424,"product":425,"cpe_part":9,"purl_type":426,"purl_namespace":424,"purl_name":425,"source":9,"versions":427},"Go","gopkg.in/yaml.v3","gopkg.in","yaml.v3","golang",[428,434],{"version":429,"is_range":430,"range_type":431,"version_start":9,"version_start_type":9,"version_end":432,"version_end_type":433,"fixed_in":9},"lt3_0_1",true,"semver","3.0.1","excluding",{"version":435,"is_range":430,"range_type":431,"version_start":9,"version_start_type":9,"version_end":436,"version_end_type":433,"fixed_in":9},"lt3_0_0_20220521103104_8f96da9f5d5e","3.0.0-20220521103104-8f96da9f5d5e",{"ecosystem":9,"name":438,"vendor":439,"product":440,"cpe_part":441,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":442},"astra trident","netapp","astra_trident","a",[443],{"version":444,"is_range":32,"range_type":445,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"na","cpe",{"ecosystem":9,"name":447,"vendor":448,"product":447,"cpe_part":441,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":449},"yaml","yaml_project",[450],{"version":451,"is_range":32,"range_type":445,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"3.0.0"]