| Package | Affected versions | Patched versions |
|---|---|---|
| remarshal | < 0.17.1 | 0.17.1 |
| remarshal | < 0.17.1 | 0.17.1 |
Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free