Login Request a demo
YA
Product
Yaml
by Yaml Project · last CVE Apr 24, 2023
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Yaml to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-2251
7.5
1%
Apr 24
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5
Affected: 2.0.0-5 before 2.2.2
CVE-2022-3064
7.5
2%
Dec 27
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory
Affected: before 2.2.4
CVE-2022-28948
7.5
4%
May 19
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input
Affected: 3.0.0
CVE-2021-4235
5.5
0%
Dec 27
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources
Affected: before 2.2.3
Showing 4