Login Request a demo
SN
Product
Snakeyaml
by Snakeyaml Project · last CVE Dec 1, 2022
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 5Low 0
Severity
All severities8Critical1High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Snakeyaml to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-1471
9.8
100%
Dec 1
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote…
Affected: before 2.0
CVE-2022-25857
7.5
3%
Aug 30
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections
Affected: before 1.31
CVE-2017-18640
7.5
27%
Dec 12
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564
Affected: before 1.26
CVE-2022-41854
6.5
2%
Nov 11
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)
Affected: before 1.32
CVE-2022-38752
6.5
3%
Sep 5
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)
Affected: before 1.32
CVE-2022-38751
6.5
2%
Sep 5
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)
Affected: before 1.31
CVE-2022-38749
6.5
2%
Sep 5
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)
Affected: before 1.31
CVE-2022-38750
5.5
1%
Sep 5
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)
Affected: before 1.31
Showing 8