SP
Vendor
Snakeyaml Project
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-1471 | SN Snakeyaml Snakeyaml Project | 9.8 | Dec 1 | SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote… |
| CVE-2022-41854 | SN Snakeyaml Snakeyaml Project | 6.5 | Nov 11 | Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS) |
| CVE-2022-38752 | SN Snakeyaml Snakeyaml Project | 6.5 | Sep 5 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS) |
| CVE-2022-38751 | SN Snakeyaml Snakeyaml Project | 6.5 | Sep 5 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS) |
| CVE-2022-38750 | SN Snakeyaml Snakeyaml Project | 5.5 | Sep 5 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS) |
| CVE-2022-38749 | SN Snakeyaml Snakeyaml Project | 6.5 | Sep 5 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS) |
| CVE-2022-25857 | SN Snakeyaml Snakeyaml Project | 7.5 | Aug 30 | The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections |
| CVE-2017-18640 | SN Snakeyaml Snakeyaml Project | 7.5 | Dec 12 | The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564 |