Skip to main content

Yaml Project

3 CVEs vendor

Monthly

CVE-2023-2251 Apr 24, 15:15 npm HIGH POC PATCH This Week

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Yaml Yaml Project
NVD GitHub
CVSS 3.1
7.5
EPSS
1.1%
CVE-2022-3064 Dec 27, 22:15 Go HIGH PATCH This Week

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Yaml Yaml Project
NVD GitHub
CVSS 3.1
7.5
EPSS
1.7%
CVE-2022-28948 May 19, 20:15 Go HIGH POC PATCH This Week

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Yaml Astra Trident Netapp Yaml Project
NVD GitHub
CVSS 3.1
7.5
EPSS
3.7%
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Yaml Yaml Project
NVD GitHub
EPSS 2% CVSS 7.5
HIGH PATCH This Week

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Yaml Yaml Project
NVD GitHub
EPSS 4% CVSS 7.5
HIGH POC PATCH This Week

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Yaml Astra Trident +2
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy