Uncaught Exception in yaml

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-2251 · ADVISORY
• eemeli/yaml commit 984f578 · WEB
• eemeli/yaml · PACKAGE
• huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c · WEB

yaml のその他の脆弱性

• CVE-2022-3064高 7.5Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
• CVE-2021-4235中 5.5Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing use…
• CVE-2022-28948高 7.5An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.