Login Request a demo
SN
Product
Snakeyaml
by Snakeyaml Project · last CVE Dec 1, 2022
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 5Low 0
Severity
All severities8Critical1High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Snakeyaml to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-25857
7.5
3%
Aug 30
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections
Affected: before 1.31
CVE-2017-18640
7.5
27%
Dec 12
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564
Affected: before 1.26
Showing 2