CVE-2023-2251
Published Apr 24, 2023Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.
Vendor/product archive
4 CVEs tagged to yaml_project / yaml — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial o…
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.