| Package | Affected versions | Patched versions |
|---|---|---|
| org.jyaml:jyaml | ≤ 1.3 | |
| jyaml | ≤ 1.3 |
JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free